Path to the user’s RSA private key for key-pair authentication. The file is passed to the service via systemd.exec(5) credentials, so it is read only by the exporter and never copied into the world-readable Nix store. If the key is encrypted, supply its password via environmentFile (SNOWFLAKE_EXPORTER_PRIVATE_KEY_PASSWORD). Mutually exclusive with password authentication; when set, do not also provide SNOWFLAKE_EXPORTER_PASSWORD.

null

"/run/secrets/snowflake-exporter.p8"