Enable nix.readOnlyStore by default