Add system.securityUpdates to quick replace system dependencies

Example usage for the current openssl bug:
```
  system.securityUpdates = with pkgs; [
    ({ old = openssl;
       new = callPackage /path/to/new/openssl {
         fetchurl = fetchurlBoot;
         cryptodevHeaders = linuxPackages.cryptodev.override {
           fetchurl = fetchurlBoot;
           onlyHeaders = true;
         };
       };
    })
  ];
```

I only did nixos-rebuild build because I've a little of fear :P is what I did safe?