Check that nix copy can copy stuff, refuses to copy unsigned paths by default, and doesn't hide the ssh password prompt.
nix flake prefetch
nix-collect-garbage -d
copyStore = true
nix-instantiate
nix-env