Manipulating the store paths on the Nix side doesn’t work with CA derivations (because these paths are just placeholders of the form `/{hash}` at eval-time)