I am trying to set up ksops with argocd-diff-review, and don't need argocd-diff-review to be able to decrpt the passwords. But it should be able to execute kustomize without an error. A possible solutions would be to define an environment variable, that will then just generate the secrets in encrypted form. Or did I miss an another obvious solution? This might also be useful int the case you want to `kustomize build` locally without keys available.