nixops check: Fix --exclude