add nix flake for development environment pin TF libvirt provider because of SSH issue explicitly pass known hosts file to libvirt connection string