add system keychains to security-tool's propagated inputs

pkgs/development/haskell-modules/configuration-common.nix

@@ -214,9 +214,6 @@ self: super: {
         patchPhase = (drv.patchPhase or "") + ''
           substituteInPlace System/X509/MacOS.hs --replace security ${security_tool}/bin/security
         '';
-        __propagatedImpureHostDeps = drv.__propagatedImpureHostDeps ++ [
-          "/System/Library/Keychains"
-        ];
       })
     else super.x509-system;
 

pkgs/os-specific/darwin/security-tool/default.nix

@@ -41,6 +41,8 @@ stdenv.mkDerivation rec {
 
   propagatedBuildInputs = [ GSS Kerberos Security PCSC Foundation ];
 
+  __propagatedImpureHostDeps = [ "/System/Library/Keychains" ];
+
   buildInputs = [
     gnustep-make
     libsecurity_asn1