Nix image for members on the run. Dry install with minimal secure comms with the rest of the federation