Adding `trusted-substituters` on the fly when running nixos-rebuild?

Try adding the query param ?trusted=1 at the end of your substituter URL.