This is mostly for use in the sandbox tests, since if the Nix store is under /build, then we can't use /build as the build directory.
This only runs on Linux because it requires a diverted store (which uses mount/user namespaces).