cgroups
?ref=
nix store gc
keep-env-derivations
ssl-cert-file
--check
--rebuild
nix-copy-closure
temproots
nix copy
sandbox