nixos-config/private/check-encryption