sops keeps everything before the = in a dotenv key, so `export TOKEN=…` is the key `export TOKEN`. lazysecrets asked sops for `TOKEN` and the value couldn't be decrypted, from the list or a link. - The sops path is the key as written; names and links are unchanged. - A link finds its key's path in the file, as the list does, instead of rebuilding it from the name.