Setcap fails (read only filesysyem)

Help
1

Trying to run a binary that requires

setcap

however it fails as the /nix/store is read only.

How is setcap handled in nixos? what are my options?

2

See security.wrappers NixOS option.