You could make it look like manually installing but have it change the definition of the environment, like NPM does with package.json. It wouldn't be distinguishable for someone who doesn't care about Nix.