Document the "out" usage in allowedReferences
Fix building with Clang
WIP: Add toSecretFile primitive for writing a file which is only readable by the owner of the nix-store.