I’ve never used Nix with private repositories, but surely impurity can be avoided, I would imagine. Found some pages: