Verify derivation output during composition on host side

[hashcashier]

          I know that it should have been. I was more thinking like a consistency or sanity check especially considering that our tests only run locally.

In that context it would be nice to have a wrapper around env::verify that calls env:verify on the guest and validates the input on the host instead.

Originally posted by @Wollac in #69 (comment)