On 16/12/2015 20:25, Peter Jones wrote: > Wouldn't the tar be world-readable in the nix store? Yes, private stuff of course should never go to the nix store currently. That's only an approach to keep permissions, ownership and maybe some other special bits.