Protect Nix-in-Docker from spurious signal 9s.

See head.hackage#38 (closed) for back story.