This allows cacert to be used with Haskell-based fetchers like
you would with regular OpenSSL-based fetchers:
buildInputs = [ cacert ];
(cherry picked from commit 5d57104d848ef0e997fd436c220801165a669862)
Triggering this setupHook for dependencies at targetOffset does not work
in cross-compilation cases where such a dependency is lacking. This
simplified setupHook is more robust.
Some SSL libs don't react to $SSL_CERT_FILE.
That actually makes sense to me, as we add this behavior
as nixpkgs-specific, so it seems "safer" to use $NIX_*.