Nix 2.24 is vulnerable to (remote) privilege escalation