it's somewhat pointless, especially with run0 being more useful (and it's already there by default) this setting also seems to ignore `nixowos.allowAddingPackages`