Pin system kernel to latest kernel that is supported by ZFS

https://nixos.org/manual/nixos/stable/#sec-linux-zfs
sounded like this is quite necessary, but on a second
read I think we're fine since we are running the default
(== latest available LTS) kernel anyway.