ykman is broken on darwin/aarch64 due to pyopenssl fuckery. This commit brings the derivation into this repo, removes openssl from it and overlays it on nixpkgs.