I'm not going to pretend this has a user-friendly CLI. It's mostly intended to be used by `nixos-install.sh` and the upcoming new image building machinery right now. If someone has a suggestion on how to remove the duplicate closure vs. path stuff in this CLI, I'm all ears.