nix-exec: use nix stable