diff --git a/vars/per-machine/crocus/user-password-rpqt/user-password-hash/machines/crocus b/vars/per-machine/crocus/user-password-rpqt/user-password-hash/machines/crocus
new file mode 120000
index 0000000..efe6fd0
--- /dev/null
+++ b/vars/per-machine/crocus/user-password-rpqt/user-password-hash/machines/crocus
@@ -0,0 +1 @@
+../../../../../../sops/machines/crocus
\ No newline at end of file
diff --git a/vars/per-machine/crocus/user-password-rpqt/user-password-hash/secret b/vars/per-machine/crocus/user-password-rpqt/user-password-hash/secret
new file mode 100644
index 0000000..e6fd470
--- /dev/null
+++ b/vars/per-machine/crocus/user-password-rpqt/user-password-hash/secret
@@ -0,0 +1,26 @@
+{
+	"data": "ENC[AES256_GCM,data:iTLYp5ai+sYaQwbT2OyItwbcpnR9m0iE2i3Psl1zafEAQgDrBsmQ3lOsuFqAre2hGVLfSuoGDCb+DTnsKLCidk/9qyFLGSUuBf6VTNoConMq1mDRfxhKPaI/jegXbVA80E2bcmyyprYaNg==,iv:LTWTnlQhWkw3CGm+Ot3dnF2g1hYL/jpcDA8m4YQyLts=,tag:k/JImbzjKHnii4gW3/QNTw==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age10lf2vjmlkff25qyft9d3c0274gvkxsf255fw0ea60cuqc7703ajqu3yxx9",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRWUZMNVBlQ3I1NEJpSnJi\nVmt6cC9oV1Y2b1VhZlB0T21Ka2FmajNRa1JVCkl2VDBZSDNnN3AwMVozYTBiN2NF\ndUErbk40dElHbFg4eGErNDFFUFk2WWcKLS0tIExQT3FHT1N2ZEdhNU00dlNiSXZm\nc1V5c05zQUh1TWhrUUpZUDRUbjhURjAKOHUV58Le0H0hqDDOAYMcw3RLuY4V9mKu\nUrPl5hXX9hp/VAuUgWDFMZVQQ8QsK8cwrZ2UFA7dZkQ7d43B+RCCjQ==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZajRsSVZCZWVleVBTY1Js\nVnlLNytQUEUyN0o3SkdNT3lxWlBtbndha1dFCkR6NG4yd3BVcmRPR1A2QkFySUsz\nSnVYTHorWU5qVWdsSjUyd0dUVXNNRDgKLS0tIHdvUmJtZDZpRi9ZSmFuOWdMMHFn\neFlpZ20zZ1E4M3RDOU9zcCtBSDlNQWcKE9hSZNOjonXkDw3UgkCpb3g47a6W7hJA\nkqvWJq2OXe5Gx243edOX/nHKtesxDKUWWPJo6KKhr1QfvJtfZaNPvA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qd2d7qpxlw9lj9l573f34vdkrazdq6yk4mvnlug46m979dl6p2p5xlzr0wt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHU2Nm1JdyBBa0tYQzQv\nL3NRU1NaNTJvb2pvS1k5dGhQRzRhRkJnU0x1VFJBcjdzdTNWbwpjbEdCUGRJTktS\nMlhXT2RTbHV5cHBCQkhhdmVMcWExVVNwOGFlOHdnZGI4Ci0tLSBQNjJXRmxDbGhX\nVnhSUktWMlh1OTZ1Y3lxQW9VVDN4dUlzRnRIV2tMUVM4CtISjtbRhpNXqHXMHB+q\nSRE/sVeZbtCBrzwIH5PhBLmnDZcFQTC5WBVSUg+AkqUoUw1gdTuLi9dwNho08V4n\n9rs=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qwnawsag6k3lq7aklc92uq72vqx3r68ylg0x8fphn0qm8d7e00eq5ynu3wk",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDJlWGZKZyBBaytuQzh6\nN05rUWFNV3JjZGIzbGFoWnpwYkNEYVdYSkM5Ry9sSmtHNW9VbgoxempnVlo0Mno4\ndHpiRHhKRmR2b2NhenZlU1Y2OUJXYVZuWk1uUGVDK040Ci0tLSA4NisrNlV2TzRv\nUVM5eGtsUkF1c2tmNFQ4K2NGTjNnaXJrUVZOcWhxREdzCk0bHmd2iAe2wK2AjPXw\nDz+ac3xmUuffDogJp0Ako+73jyEfGIxxfKiC9r5XpiVpOqeaEaLmLcp1WnuHC59K\n4mk=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-23T22:14:50Z",
+		"mac": "ENC[AES256_GCM,data:uZSs9GsGnc46ZpUSH1R9snULRKhPGBTj85Jn3yOSvZFN6JjV7imTU9xS0opLqdrOPHN3VsbCilOWwQ+1/5rF3GDZrTQosAgSh0bVZJAorcdjA+CYdC90aQUcUx9qt449IE2vbRaBLwGL7TWVD1dx6Yn5knX1TUsNlxvwjmDr0wA=,iv:Il+DcwkYG6Wkeegv4UZmhUsVEd2jUQMXui0oov18bx8=,tag:+lDYf55ZCwE6mGBu5CR/Zg==,type:str]",
+		"version": "3.11.0"
+	}
+}
diff --git a/vars/per-machine/crocus/user-password-rpqt/user-password-hash/users/rpqt b/vars/per-machine/crocus/user-password-rpqt/user-password-hash/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/crocus/user-password-rpqt/user-password-hash/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file
diff --git a/vars/per-machine/crocus/user-password-rpqt/user-password/secret b/vars/per-machine/crocus/user-password-rpqt/user-password/secret
new file mode 100644
index 0000000..883a52d
--- /dev/null
+++ b/vars/per-machine/crocus/user-password-rpqt/user-password/secret
@@ -0,0 +1,22 @@
+{
+	"data": "ENC[AES256_GCM,data:WljOTaqWeokVZBaGy/iKaZ07ifkXnjfqtG4m/qxmvGg=,iv:4F0UNuO2zvX9LKFfXCHt3xgU40R0ESWqzZs2VuJ+Qh0=,tag:L3XBFiV3vIn2E1y5CCyiIg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1Snd3SU50WFFzYjJjRzQ1\nSFM4MlNURXhoT3pvM2J4aGNLVGdwZnVkaXhBCjJkOXRaODZpVnA5MXR4S1hJbUZa\nN04yZXNXcEpmWmd3VmxpaGtnS21tWVkKLS0tIEtRTmY5RUJ6MmhoWHFST2J1YkMz\nbmYxTGhCMkRudzNLamcvTERjK0ZlTFEKjK0cQPJoFEgt8kOk2LXAKH0T8r7g571F\nnVXnl5RHmelbmk2Dz6iCRVpkwQXZoXgouknhPlSYHS5tx/SAz2aKyg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qd2d7qpxlw9lj9l573f34vdkrazdq6yk4mvnlug46m979dl6p2p5xlzr0wt",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IHU2Nm1JdyBBdlFiUjdr\nbHZhcURzYTBGN0ZTaWdwZ3RtZFZQVWhHYTM3Y3FseUViZDBWUgplRzJsaU9uVDJX\nYXZHRG9aVUZiZUljMTk3RXRSWVJLRE42TFV5RXFZZW1zCi0tLSBNbUdYcU1sVStP\ndDZPRHpmMXBVcnpTQm9wZTZqUzhCNndleEFXZnduSkUwCpABTEBuVjrAvyQD/wPi\n+R8gfb2AiqDQAAEjdf60KRc9W/968f+E0l/dKRs/EhWNO5ypQdIBsYV1lsPQjPAo\nIjM=\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1yubikey1qwnawsag6k3lq7aklc92uq72vqx3r68ylg0x8fphn0qm8d7e00eq5ynu3wk",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHBpdi1wMjU2IDJlWGZKZyBBM3NDL0s1\nMW9odm1ML0Y1dTl5RUpaY2l1MVVFZzU0UW9EMVFlV0dUenpqZApMMGkxU3I0c05G\nMkVGUFF4TTd3WTlSc0JZVk5YMm5aUStwNHJLQWw1RkpNCi0tLSBxNWdPNUdLWVBQ\nR2NCYlNlZnJONVluL2g0b1V0TEVSOGI4bG9kT1JWMUY0ChQRkl4yfJk/BFQGFLYB\ng6hQnwTqkpL5Y4SlRvB+DN+IK6IPARDGYp29yAgR+ALYj7G95AXYK7jWTk1xRzLG\ndB8=\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-02-23T22:14:49Z",
+		"mac": "ENC[AES256_GCM,data:Ja82a4+hW2Nggco+Wfy05ea/1E+YZtt+tLjqBIr6FTkKZ31thsOW0IcJSQ81Z7NW9TG4Cb6TvxhPnxoIKMOdZZiW53+Wf2xHjPY15W13SxYIqiM5OVv00iHPLzXf3PxM0AREMu3E+TLF6SnbZEdYgx+Gvy0iCj0I41hskg8z3sQ=,iv:0qEC0c/ADCwWnuIkiNS3UgeOTFtAmM8BXmtvUoorpfY=,tag:rYsVDt1x+206iWCEznn+7A==,type:str]",
+		"version": "3.11.0"
+	}
+}
diff --git a/vars/per-machine/crocus/user-password-rpqt/user-password/users/rpqt b/vars/per-machine/crocus/user-password-rpqt/user-password/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/crocus/user-password-rpqt/user-password/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file