move some secret-watching stuff from hostapd to secrets

modules/hostapd/service.nix

@@ -9,7 +9,7 @@
 { interface, params} :
 let
   inherit (liminix.services) longrun;
-  inherit (lib) concatStringsSep mapAttrsToList;
+  inherit (lib) concatStringsSep mapAttrsToList unique ;
   inherit (builtins) map filter attrValues length head typeOf;
 
   # This is not a friendly interface to configuring a wireless AP: it
@@ -51,19 +51,9 @@ let
       exec ${hostapd}/bin/hostapd -i $(output ${interface} ifname) -P /run/${name}/hostapd.pid -S /run/${name}/hostapd.conf
     '';
   };
-  watched-services =
-    (filter (f: typeOf f == "set") (attrValues attrs));
-
+  watch = filter (f: typeOf f == "set") (attrValues attrs);
 in svc.secrets.subscriber.build {
-  watch = {
-    service = assert (length watched-services == 1); (head watched-services).service;
-    paths = unique (
-      map (s: s.path)
-        (filter
-          (f: f.service == (head watched-services).service)
-          watched-services
-        ));
-  };
+  inherit watch;
   inherit service;
   action = "restart-all";
 }