Basically something like `dev/example.nix` in https://github.com/nixops4/nixops4/compare/main...eval-sudo-wip#diff-229367db3333e23b9ffb8cf7233ff62cb7f595dddbb665caadd9178953e5f6e7 plus some writing