Replace depreciated substituteAll with replaceVarsWith

feat: flake command compat

fix: remove privileged from darwin

doc: fix small typo in readme