nixos/network-interfaces: Use built-in systemd escape function