Wrap nixops with the openssh of the system it is building for.