nix-config/systems/common/core/services/firejail.nix