Merge declarative settings into a writable configuration file during activation, preserving settings and credentials written by the application. Declarative values take precedence; removing a setting from Nix does not remove it from the existing file. Arrays are replaced.
Formatting is not preserved. Keep secrets out of settings, since its values are still copied to the world-readable Nix store. New files have mode 0600; existing files retain their permissions.