Install sealed-secreats via manifest