Set CURL_CA_BUNDLE env variable for nix-daemon to allow pulling from a binary cache on https. Did not add to nix.envVars to avoid being added to shellInit.
modules/misc/ids.nix: document the fact that the uid for tcpcryptd is hard-coded in the daemon
try to fix zfs into initrd