If the .nix files listed in the cache are full paths pointing at the store we get errors like this in restricted eval mode: error: access to path '/nix/store/...-cabal-simple.nix' is forbidden in restricted mode
Hamish Mackenzie