Add Attachment:NIXOS-70: "nix-build -K" leaves an undeletable directory under `/tmp, leading to DoS