ssh-tpm-agent experiement failed again

home-manager/fragments/jujutsu.nix

···
         signing = {
           behavior = "own";
           backend = "ssh";
-          key = keys.milo-ed25519;
+          key = keys.milo-ecdsa;
           git.sign-on-push = true;
         };
 

home-manager/profiles/desktop.nix

···
 {
   config,
+  lib,
   pkgs,
 
   isDarwin,
···
         # Makes electron apps use ozone and not crash because xwayland is not there
         NIXOS_OZONE_WL = "1";
 
+        SSH_ASKPASS = lib.getExe pkgs.lxqt.lxqt-openssh-askpass;
         # Respect XDG spec
         BUN_INSTALL = "${config.xdg.dataHome}/bun";
         CALCHISTFILE = "${config.xdg.cacheHome}/calc_history";
···
     };
 
     services.tailscale-systray.enable = true;
+
+    services.ssh-tpm-agent.enable = true;
+    # maybe? needed for ssh-tpm-agent to enroll the key the first time, find another way
   };
 }

nixos/fragments/security.nix

···
       };
     };
 
+    security.tpm2.enable = true;
+
     # Signing
     programs.gnupg.agent.enable = true;
     services.gnome.gnome-keyring.enable = true;
···
       };
     };
 
-    programs.ssh.startAgent = true;
+    programs.ssh.startAgent = false;
 
     services.fwupd.enable = true;
   };

nixos/profiles/laptop.nix

···
     };
 
     services.earlyoom.enable = true;
+
+    environment.systemPackages = [
+      pkgs.keyutils
+    ];
   };
 }

secrets/keys.nix

···
 
   # User keys (~/.ssh/id_{ed25519,ecdsa}.pub)
   milo-ed25519 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJdt7atyPTOfaBIsgDYYb0DG1yid2u78abaCDji6Uxgi";
+  milo-ecdsa = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPtqdjt54Wys20nb8pF74rKtZCWHs/v99BJkL4kyYyz9QyJ3H+YilojTbxj25BjPktqi2GqLHjsdC8L87cTXlhA=";
   wirody = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMdW6ijH9oTsrswUJmQBF2LQkhjrMFkJ1LktnirPuL2S";
   users = [
     milo-ed25519
+    # not supported by age
+    # milo-ecdsa
     wirody
   ];
 }