Passing --arg config.allowUnfree true to e.g. nix-build now results in config with value { allowUnfree = true; } passed to the expression.