tried adding nix.readOnlyStore but it's not yet in the nixos channel