nix and nixos configs

master.nix [kubernetes/]: disable privileged, enable audit logging, encryption at rest, restrict admission master