Add --repair option to nixops
vim: add config option to generate vimrc
linux: add 'hardened' kernel with grsec/PaX+apparmor enabled
grsecurity: Update to 2.9.1-3.2.51-201309162119
nixops: Backport dhcpcd bug fix