Did it download busybox in the same invocation, i.e., you didn’t build without --restrict-eval first? Just tried again, nix 2.5.1, experimental-features = nix-command flakes ca-derivations, fails as in OP. I’m glad to provide more info, though I don’t know what’s relevant.