Nixos-install with custom flake results in /boot being world accessible

Ooopsie. You are right. Fixing…

It’s been recently reported on disko.