* nar.sh needs a path.
* When pushing, put the hash in the file name so that the client can verify (proof-carrying file names?).