For now, unclear if we should be able to specify it per-machine, or just within the network.nix. The important part is to support nix-style dependency pinning and also patched versions of nixpkgs.