anchor.diff:           start_link_rest_service/0,
            ssl_cert_key_path/0,
            ssl_cacert_key_path/0,
  +         memcached_cert_path/0,
  +         memcached_key_path/0,
            sync_local_cert_and_pkey_change/0]).
   
   %% gen_server callbacks
  
positive.code: 
  local_cert_path_prefix() ->
      filename:join(path_config:component_path(data, "config"), "local-ssl-").
  
  check_local_cert_and_pkey(ClusterCertPEM, Node) ->
      true = is_binary(ClusterCertPEM),
  
negative.code:         true ->
              {LocalCert, LocalPKey} = maybe_generate_local_cert(CertPEM, PKeyPEM, Node),
              ok = misc:atomic_write_file(Path, [LocalCert, LocalPKey]),
              ok = misc:atomic_write_file(raw_ssl_cacert_key_path(), CertPEM),
              ok = misc:atomic_write_file(memcached_cert_path(), [LocalCert, CertPEM]),
              ok = misc:atomic_write_file(memcached_key_path(), LocalPKey);
          false ->
              _ = file:delete(raw_ssl_cacert_key_path()),
              ok = misc:atomic_write_file(Path, [CertPEM, PKeyPEM]),
              ok = misc:atomic_write_file(memcached_cert_path(), CertPEM),
              ok = misc:atomic_write_file(memcached_key_path(), PKeyPEM)
      end.
  
  restart_ssl_services() ->
  