Borg passphrase files are named by app; looping over all backup_clients let public-cloud-frontend overwrite the key of the live 'webserver' repo. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>