nixpkgs/pkgs/tools/security/certstrap
..
default.nix