Previously, the zfs binaries were put in $out/sbin where the stage-1 patchelf wouldn't fix them up. This would fail the allowedReferences test. Move the zfs binaries to $out/bin.