This avoids surprises when nixos-generate-config is used on a running system and an overlayfs for docker that is unavailable in stage 1 is added to /etc/fstab (because it forces me to read what was changed).
