anchor.diff:                  echo -n .
                   sleep 1
                   gpg --card-status > /dev/null 2> /dev/null
  -                if [ $? == 0 ]; then
  -                    success=true
  -                    break
  -                fi
  -            done
  -            if [ $success == true ]; then
  -                echo " - success";
  -                return 0
  -            else
  -                echo " - failure";
  -                return 1
  -            fi
  -        fi
  -        return 0
  -    }
  -
  -    wait_fido2key () {
  -        local secs="''${1:-10}"
  -
  -        fido2luks connected 1>/dev/null 2>&1
  -        if [ $? != 0 ]; then
  -            echo -n "Waiting $secs seconds for the FIDO2 key to appear..."
  -            local success=false
  -            for try in $(seq $secs); do
  -                echo -n .
  -                sleep 1
  -                fido2luks connected 1>/dev/null 2>&1
                   if [ $? == 0 ]; then
                       success=true
                       break
  
positive.code:     open_with_hardware() {
        local passsphrase
  
        if wait_fido2key ${toString fido2.gracePeriod}; then
            ${if fido2.passwordLess then ''
              export passphrase=""
            '' else ''
              echo -n "FIDO2 salt for ${device}: "
              read -rs passphrase
              echo
            ''}
              echo "Waiting for your FIDO2 device..."
              fido2luks -i open ${device} ${name} ${fido2.credential} --salt string:$passphrase
          else
              echo "No FIDO2 key found, falling back to normal open procedure"
              open_normally
          fi
      }
      ''}
  
negative.code: 
  let
    luks = config.boot.initrd.luks;
    kernelPackages = config.boot.kernelPackages;
  
    commonFunctions = ''
      die() {
  