cluster/services/locksmith: fix default values

cluster/services/locksmith/provider.nix

@@ -42,9 +42,11 @@ in
                 };
               };
             }));
+            default = {};
           };
         };
       }));
+      default = {};
     };
   };
 

cluster/services/locksmith/receiver.nix

@@ -12,6 +12,7 @@ in
 {
   options.services.locksmith.waitForSecrets = lib.mkOption {
     type = with lib.types; attrsOf (listOf str);
+    default = {};
   };
 
   config = lib.mkMerge [