Security: Ensure that a build product refers to the Nix store
Security: Also check paths in the web server
Use getMainOutput