error:
       … while evaluating a branch condition
         at «string»:25:5:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |     ^
           26|       v

       … in the left operand of the OR (||) operator
         at «string»:25:28:
           24|     v:
           25|     if !builtins.isAttrs v || isDrv v then
             |                            ^
           26|       v

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/g36zcl1fwsrbg2yfh4ml4f3b9lkq3v1v-source/nixos/modules/system/activation/top-level.nix':

       … while evaluating the option `warnings':

       … while evaluating definitions from `/nix/store/g36zcl1fwsrbg2yfh4ml4f3b9lkq3v1v-source/nixos/modules/system/boot/systemd.nix':

       … while evaluating the option `systemd.services.kanidm.serviceConfig':

       … while evaluating definitions from `/nix/store/g36zcl1fwsrbg2yfh4ml4f3b9lkq3v1v-source/nixos/modules/services/security/kanidm.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: Refusing to evaluate package 'kanidm-with-secret-provisioning-1.9.4' in /nix/store/g36zcl1fwsrbg2yfh4ml4f3b9lkq3v1v-source/pkgs/servers/kanidm/generic.nix:200 because it is marked as insecure

       Known issues:
        - kanidm 1.9 has reached end-of-life.

       Please upgrade by verifying `kanidmd domain upgrade-check` and choosing the
       next version with `services.kanidm.package = pkgs.kanidm_1_x;`

       See upgrade guide at https://kanidm.github.io/kanidm/master/server_updates.html



       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

          Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
                then pass `--impure` in order to allow use of environment variables.

       b) for `nixos-rebuild` you can add ‘kanidm-with-secret-provisioning-1.9.4’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "kanidm-with-secret-provisioning-1.9.4"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘kanidm-with-secret-provisioning-1.9.4’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "kanidm-with-secret-provisioning-1.9.4"
              ];
            }