diff --git a/__update_sops.sh b/__update_sops.sh
index 920ba87..bcf46ff 100755
--- a/__update_sops.sh
+++ b/__update_sops.sh
@@ -47,11 +47,12 @@ EOM
   for gpgkeyfile in *automation*gpg.pub; do
     echo "      $(fn_extract_fpr "${gpgkeyfile}"),"
   done
-  # all but last line get comma
+  # HACK: TODO: yq update anchor
+  # HACK: all but last line get comma
   for gpgkeyfile in $(ls *gpg.pub | grep -v automation | sed '$d'); do
     echo "      $(fn_extract_fpr "${gpgkeyfile}"),"
   done
-  # last line no comma
+  # HACK: last line no comma
   for gpgkeyfile in $(ls *gpg.pub | grep -v automation | tail -n 1); do
     echo "      $(fn_extract_fpr "${gpgkeyfile}")"
   done