eyaml -e -o block -p -n 'root_pw_hash!loaner'
then copy/paste the result into `/etc/hiera/secrets.yaml` or into your own `/etc/hiera/environments/<username>_secrets.yaml`. See {{bug|918070}} if -p doesn't work.
To check the value of a secret, use 'hiera':