diff --git a/vars/per-machine/verbena/garage/admin_token/machines/verbena b/vars/per-machine/verbena/garage/admin_token/machines/verbena
new file mode 120000
index 0000000..e061a4c
--- /dev/null
+++ b/vars/per-machine/verbena/garage/admin_token/machines/verbena
@@ -0,0 +1 @@
+../../../../../../sops/machines/verbena
\ No newline at end of file
diff --git a/vars/per-machine/verbena/garage/admin_token/secret b/vars/per-machine/verbena/garage/admin_token/secret
new file mode 100644
index 0000000..1c1a66d
--- /dev/null
+++ b/vars/per-machine/verbena/garage/admin_token/secret
@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:d7ch6OypkqLBvYkVCDpFVxH0EPJ3m50L4hWQoDPJiXRbKBGyT9P+4iI4voOe,iv:IBU3q9gxwKulFMJa0vbfQnkEc2SnLfSnDaoz4yO2zkE=,tag:RL7+GfFl9oOONRZ599RKUg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5SE8zVm1iWkp6S0VTamZ4\neDJLMWlhdWg5amkrSlF3YkUxVFVpWmVuS3dFCjQ5TThTeEQ5TncrMlFPWlBod1Bo\nZ29zVHNIWGVnUDEwcTRVa0xEWXV5RTQKLS0tIFhzQnBaK3M1aGVHbzFYQkVaSC9P\nOGtDWVdRT0prU0V4TjhmY0RCelRkTUEK8QrXMNenbkqPkDg8yatTGBoz25NxQdwx\nlJYbMy1THKipx4KbHCbdIJWvKc79RpPpH7uNy8QJLZXder+yyQDMfA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1teege0n8gf9qcheuxtpy7cltf8aczt9ugh8ztp9v4fftn3wwd4jsz0lpeh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvTThRRzFaV3h0RXRiSnhK\na1dwYW1HdUJlU3dma3ZUeVpxRGtFUld0eWh3Cmg3NHFFdjhvcWdsOGtzWWJCMXJp\nVXdzZWxXazJvL09sR0FYdzRsRktwMncKLS0tIC9ieVR0N3kwVGtZL3hBcG1yZ2RF\nWUtjZG9DUmxnSldIbUF1bSt6eC94MlEK32TVPo+YGG7R2L4aIt/gDtdwcFmd1g2Q\nbcahXJ1TI8EPxmVUmFKYSz7qEBUjxlYwDVDJOy9xzgWnP7TYwmTZKA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-11T22:27:00Z",
+		"mac": "ENC[AES256_GCM,data:tzrsM/GRxEOeZwksc0MjNzG6hNqrVbg0gwctd5LQLRtMLCOokYQO6pS5gjEQ/zS6+SUbauKyifO8xMfkrc5SQ2Iqqgj2tIZIf2xXntQ/152X1IpQKEQN9zO1LQhI6g/w4jtgnNOT4bw6XW5yKW6CN4NfKNCbEzisWjyiQFRxmR4=,iv:LIclgDzRbSYuTbYzONaqaso8TZUBg8r6pG6ZtRLQyXY=,tag:JpnzzVGmNdpRx2jiR4V7oA==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/vars/per-machine/verbena/garage/admin_token/users/rpqt b/vars/per-machine/verbena/garage/admin_token/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/verbena/garage/admin_token/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file
diff --git a/vars/per-machine/verbena/garage/metrics_token/machines/verbena b/vars/per-machine/verbena/garage/metrics_token/machines/verbena
new file mode 120000
index 0000000..e061a4c
--- /dev/null
+++ b/vars/per-machine/verbena/garage/metrics_token/machines/verbena
@@ -0,0 +1 @@
+../../../../../../sops/machines/verbena
\ No newline at end of file
diff --git a/vars/per-machine/verbena/garage/metrics_token/secret b/vars/per-machine/verbena/garage/metrics_token/secret
new file mode 100644
index 0000000..25e0941
--- /dev/null
+++ b/vars/per-machine/verbena/garage/metrics_token/secret
@@ -0,0 +1,19 @@
+{
+	"data": "ENC[AES256_GCM,data:ExSv+ji6femtNG+/+JgGpjBNbcMQJeHIOjsrL7arFbWPPJlhV5Bqs6QuVeIT,iv:l43EjooL912qou3fJ5iFObQdHWtSCI+13xQZvnhS+v4=,tag:kqAOc2YYNDks1upXd3aSDQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1mqnmzn203hyj200psc982ehcedjmcdz8s0ncc50fm9jszjx7rgmqqmppw5",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZZkV5dnh0MWtJYThZaTlQ\nZUdyRjYrSDRHSG4wSktGUFZ4L1RJSTBzWGdVCjYrQjVaZ0NYdUhiek5mZWFJTnd5\nZ1lSWWhpTWk2S0tUSW9CUXlzd2UzZVEKLS0tIGxiVHVROG9RdUZlOWJnWTRzTGd4\nTGJETlppVHV0QjlvUWNtNkp2MldjOUEKzxXh/q/DwmU3HfxkCQLUy052LCMQOEUR\nqgDB+41/fsXMVUaLEoIqu7QtdOI7U81bv+xwmAP0KPaifLj4spWygg==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1teege0n8gf9qcheuxtpy7cltf8aczt9ugh8ztp9v4fftn3wwd4jsz0lpeh",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnNmd5dGVzdDdkY1A3RXlL\ncnIwaTJQVU1vMGwvVitIZHExWHhEVUlJbHpBClYxUWkvdGluelRwVVhRUG1hTUQr\naWNCemd2SlhrUHgvSEpoSVlLbEVWQ28KLS0tIFhkSUt6VkdFRWpiMDFIVWJEZkpG\nZXFOQlpuNnY5Rmg5ODhVb0ZuOE9adjAKFW0LBHcJK7iWYzsJDr4FK1uc9fUskdi6\nAxBPMnDghGP6osw79wFYJz87n5fPsgrjOohJN7DDFysp261l+LWOrA==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2025-09-11T22:27:00Z",
+		"mac": "ENC[AES256_GCM,data:o4ehewq1VRocELO4C2wcXAjlJTGCqEgenYXRCS3Yws0G2QQOw767ZSev8EFs7z5H9p/5iS3YWMRBzwcNsAbpcJyc4kDZFkRqOs9GOlkzZLuHlkBLWkkuZSK8N9vvTyon2Lw4veuxVVn0S/2RFXPvkyAHSMxlb1PsRRiu6k7Vn5s=,iv:h+AsVY/+BTTYzRCGT8KcETrZOMuUKQWv5aO1oND85JI=,tag:aOWfgcXEzSgeiUBBP+x5ew==,type:str]",
+		"unencrypted_suffix": "_unencrypted",
+		"version": "3.10.2"
+	}
+}
diff --git a/vars/per-machine/verbena/garage/metrics_token/users/rpqt b/vars/per-machine/verbena/garage/metrics_token/users/rpqt
new file mode 120000
index 0000000..c6af5c7
--- /dev/null
+++ b/vars/per-machine/verbena/garage/metrics_token/users/rpqt
@@ -0,0 +1 @@
+../../../../../../sops/users/rpqt
\ No newline at end of file