Any reason why this cannot be a shell function (e.g. defined as a setup hook)? I.e. so you can just write
```
postInstall =
  ''
    paxmark m $out/bin/foo  
  '';
```