We check for the ability to push at the end, but not before running `nix flake update`. We should do this.