It would be nice if the deployment key service name could be extracted from the key type directly. Less prone to typos/mistakes as a result.

E.g.

after = ["network-online.target" config.deployment.keys.my-secret.service];