Pin system kernel to latest kernel that is supported by ZFS
https://nixos.org/manual/nixos/stable/#sec-linux-zfs sounded like this is quite necessary, but on a second read I think we're fine since we are running the default (== latest available LTS) kernel anyway.
(Better safe than sorry I guess)