Dies the agent have access to is own nix config (and therefore install permissions), or do you have to provide it all the tools externally?