nix: Backport bug fix to check NAR integrity