this derivation will be built:
  /nix/store/wz4s08kr0n79vg4dz0kn9p35qgs2bzzq-vm-test-run-nix-grpc-store.drv
error: Cannot build '/nix/store/wz4s08kr0n79vg4dz0kn9p35qgs2bzzq-vm-test-run-nix-grpc-store.drv'.
       Reason: builder failed with exit code 1.
       Output paths:
         /nix/store/r49njcp5payaniqz6dvfrvfqymzack77-vm-test-run-nix-grpc-store
       Last 25 log lines:
       > machine: must succeed: journalctl -u nix-grpc-daemon-mtls.service | grep -q 'event=denied method=BuildPaths(repair) cn=rw-client'
       > machine: (finished: must succeed: journalctl -u nix-grpc-daemon-mtls.service | grep -q 'event=denied method=BuildPaths(repair) cn=rw-client', in 0.05 seconds)
       > (finished: subtest: certificate ACL: write role builds via the native BuildPaths RPC, in 3.01 seconds)
       > subtest: certificate ACL: unmatched CN is denied
       > machine: must fail: nix store info --store 'grpc://localhost:50052?ca-cert=/run/nix-grpc-certs/ca.pem&client-cert=/run/nix-grpc-certs/stranger.pem&client-key=/run/nix-grpc-certs/stranger.key'
       > machine # Store URL: grpc://localhost:50052?ca-cert=/run/nix-grpc-certs/ca.pem&client-cert=/run/nix-grpc-certs/stranger.pem&client-key=/run/nix-grpc-certs/stranger.key
       > machine # [   22.261603] nix-grpc-daemon[774]: ts=2026-08-30T18:27:31Z level=info event=denied method=StoreInfo cn=stranger role=none
       > machine # error: gRPC StoreInfo on 'localhost:50052' failed: no access rule matches certificate CN 'stranger'
       > machine: (finished: must fail: nix store info --store 'grpc://localhost:50052?ca-cert=/run/nix-grpc-certs/ca.pem&client-cert=/run/nix-grpc-certs/stranger.pem&client-key=/run/nix-grpc-certs/stranger.key', in 0.26 seconds)
       > machine: must succeed: journalctl -u nix-grpc-daemon-mtls.service | grep -q 'event=denied method=.* cn=stranger role=none'
       > machine: (finished: must succeed: journalctl -u nix-grpc-daemon-mtls.service | grep -q 'event=denied method=.* cn=stranger role=none', in 0.02 seconds)
       > (finished: subtest: certificate ACL: unmatched CN is denied, in 0.28 seconds)
       > subtest: access log attributes clients by certificate CN
       > machine: must succeed: journalctl -u nix-grpc-daemon-mtls.service | grep -E 'event=session_end method=Connect cn=localhost .*bytes_out=[0-9]+'
       > machine: output:
       > !!! Test "access log attributes clients by certificate CN" failed with error: "command `journalctl -u nix-grpc-daemon-mtls.service | grep -E 'event=session_end method=Connect cn=localhost .*bytes_out=[0-9]+'` failed (exit code 1)"
       > !!! Traceback (most recent call last):
       > !!!   File "<string>", line 199, in <module>
       > !!!     machine.succeed(
       > !!! 
       > !!! RequestedAssertionFailed: command `journalctl -u nix-grpc-daemon-mtls.service | grep -E 'event=session_end method=Connect cn=localhost .*bytes_out=[0-9]+'` failed (exit code 1)
       > cleanup
       > kill QemuMachine (pid 45)
       > machine # qemu-system-x86_64: terminating on signal 15 from pid 39 (/nix/store/3n4qphl9s728sz8frmpqqrv9b1m87g68-python3-3.14.7/bin/python3.14)
       > (finished: cleanup, in 0.55 seconds)
       For full logs, run:
         nix log /nix/store/wz4s08kr0n79vg4dz0kn9p35qgs2bzzq-vm-test-run-nix-grpc-store.drv