`man 5 nix.conf` is unclear about which settings are overridable by what "kind" of user

[NobbZ]

Problem

When I read the man 5 nix.conf I can not see whether an option is available/setable by any "allowed" user or requires a "trusted" user for the option.

Eg. a user might want to add an substituter on the CLI providing --option extra-substituters … --option extra-trusted-public-keys … appropriately, but still sees a "ignored untrusted substituter" message.

They figure using sudo works, and might fall back to a "just use sudo for everything" behaviour, which in general is dangerous regardless of NixOS, Linux or Mac as the host.

Proposal

Add a remark to each option whether it can be set by any allowed user or if it requires to be a trusted user.

Also add a paragraph at the top that roughly explains the concept and/or refers to a man page that explains the concept of allowed and trusted users more in depth.

Checklist

• checked latest Nix manual (source)
• checked open documentation issues and pull requests for possible duplicates

Priorities

Add 👍 to issues you find important.

[b-m-f]

Is there an efficient way to check the required permissions for all those options?