still need to do hardening and docs
this is in preparation for upstreaming parts of this into nixpkgs