Shouldn'it be ok as nixops connects as root ? 
`nixops scp --from server /proc/kmsg skmsg.log
root@192.168.122.50:/proc/kmsg -> skmsg.log
skmsg.log: Permission denied
`