[Nix] expression to generate easyrsa certificates (eg. OpenVPN)