Needed by the following commits. Also, don't use the cachix cache as a substituter for local, non-CI builds. This obviates the need for the 'untrusted' warning in build.sh.
