The option `boot.nixStoreMountOpts` needs to be tested.
Trying to put a SUID/SGID file into the store will fail because of seccomp filters.
The best test we can do, without intentionally dropping the seccomp filter here,
is to just check `findmnt` and read the mount options in use.