conditional decryption with symlinks

[inquisitev]

I have some computers where i want ssh keys to not be installed or decrypted. (work + personal, one chezmoi)

can use templates + symlinks for this?

Right now in my chezmoi dot_ssh i have this, after this works i can use templates to conditionally install it i think.
file:
dot_ssh\symlink_id_g5

contents:

~/.local/share/chezmoi/.chezmoidata/.ssh/encrypted_id_g5

is that the right way? is this even possible?

[inquisitev]

~/.local/share/chezmoi/.chezmoiignore might be what im looking for here

[inquisitev]

It looks like ignored is the right tool, but i am strugging with it #4186