gpg wfh nixos security compliance lemonade nix ssh utm vm yubikey 4dww direnv ghostty hammerspoon kitty maccy note pass remote renew retro zen-browser zig