Add --keep-secret option to nix-store --register-validity, to canonicalise the content as a secret.
addToStoreFromDump keep the ownership extracted from the NAR file, when a NAR file is used.