Also, comments.

This results in less repetition, less abstraction leakage, and provides more
power to the private-storage module (by exposing meaningful values instead of
Tahoe-LAFS config strings).

This is a bricked machine in the data center where running NixOS is hard.