secrets: re-encode for inf, nuke secrets/plain
diff --git a/env.sh b/env.sh
index f657783..73696a8 100644
--- a/env.sh
+++ b/env.sh
@@ -56,7 +56,7 @@
 
         cd "$hscloud_root"
         secrets="$hscloud_root/secrets"
-        ca="$secrets/plain/ca.key"
+        ca="$secrets/ca.key"
         [ ! -f "$ca" ] && ( scripts/secretstore decrypt "$secrets/cipher/ca.key" > $ca )
 
         ssh root@$fqdn -- nix-shell -p openssl --command "\"openssl req -new -key /opt/hscloud/${certname}.key -out /opt/hscloud/${certname}.csr -subj '${subj}'\""
@@ -87,7 +87,7 @@
         keyfile="$secrets/$certname.key"
         cert="$hscloud_root/data/$certname.crt"
         csr="$hscloud_root/data/$certname.csr"
-        ca="$secrets/plain/ca.key"
+        ca="$secrets/ca.key"
         [ ! -f "$ca" ] && ( scripts/secretstore decrypt "$secrets/cipher/ca.key" > $ca )
 
         echo "Checking if key exists..."