Keep secrets when decryption is impossible

modules/secrets.nix

@@ -65,8 +65,13 @@ let
           else
             echo "Failed to decrypt the secret"
             rm '${decrypted}.tmp'
+            if [[ -f '${decrypted}' ]]; then
+              echo "The decrypted file exists anyways, not failing"
+              exit 0
+            else
               exit 1
             fi
+          fi
         '';
 
         serviceConfig = {