We need the latest version of the Dhall interpreter, but that needs a pin to Nixpkgs release-17.09. Use submodule rather than a fetchgit because dhall-haskell requires a submodule itself, and fetgit does not pull this in.