change ykfde to wrap with all needed path

utils/pkgs/ykfde/default.nix

@@ -1,5 +1,16 @@
-{ pkgs, lib, stdenv, makeWrapper }:
+{ pkgs,
+  lib,
+  stdenv,
+  makeWrapper,
+  openssl,
+  yubikey-personalization,
+  cryptsetup,
+}:
 
+let
+  inherit (nixpkgs) callPackage pkgs stdenv;
+  pbkdf2Sha512 = callPackage ./pbkdf2-sha512.nix { };
+in
 stdenv.mkDerivation {
   name = "ykfde";
   src = ./scripts;
@@ -7,4 +18,7 @@ stdenv.mkDerivation {
   installPhase = ''
     install -D --target $out/bin *
   '';
+  postInstall = ''
+    wrapProgram $out/bin/ykfde-enroll --prefix PATH : ${lib.makeBinPath [openssl, yubikey-personalization, cryptsetup, pbkdf2Sha512]}
+  '';
 }