anchor.diff:  { buildVersion, sha256, dev ? false }:
   
  -{ fetchurl, stdenv, xorg, glib, glibcLocales, gtk2, gtk3, cairo, pango, libredirect, makeWrapper, wrapGAppsHook
  -, pkexecPath ? "/run/wrappers/bin/pkexec", gksuSupport ? false, gksu
  +{ fetchurl, stdenv, xorg, glib, glibcLocales, gtk3, cairo, pango, libredirect, makeWrapper, wrapGAppsHook
  +, pkexecPath ? "/run/wrappers/bin/pkexec"
   , writeScript, common-updater-scripts, curl, gnugrep
   }:
  -
  -assert gksuSupport -> gksu != null;
   
   let
     pname = "sublime-merge";
  
positive.code:         --set LD_PRELOAD "${libredirect}/lib/libredirect.so" \
          --set NIX_REDIRECTS ${builtins.concatStringsSep ":" redirects} \
          --set LOCALE_ARCHIVE "${glibcLocales.out}/lib/locale/locale-archive" \
          ${stdenv.lib.optionalString (!usesGtk2) ''"''${gappsWrapperArgs[@]}"''}
      '';
    };
  in stdenv.mkDerivation (rec {
  
negative.code:           $binary
        done
  
        # Rewrite pkexec argument. Note that we cannot delete bytes in binary.
        sed -i -e 's,/bin/cp\x00,cp\x00\x00\x00\x00\x00\x00,g' ${primaryBinary}
  
        runHook postBuild
  