anchor.diff:            this once.
           '';
         };
  +
  +      requestEncryptionCredentials = mkOption {
  +        type = types.bool;
  +        default = config.boot.zfs.enableUnstable;
  +        description = ''
  +          Request encryption keys or passwords for all encrypted datasets on import.
  +
  +          Dataset encryption is only supported in zfsUnstable at the moment.
  +        '';
  +      };
  +
       };
   
       services.zfs.autoSnapshot = {
  
positive.code:         {
            assertion = !cfgZfs.forceImportAll || cfgZfs.forceImportRoot;
            message = "If you enable boot.zfs.forceImportAll, you must also enable boot.zfs.forceImportRoot";
          }
        ];
  
  
negative.code:             done
              echo
              if [[ -n "$msg" ]]; then echo "$msg"; fi
              ${lib.optionalString cfgZfs.requestEncryptionCredentials ''
                zfs load-key -a
              ''}
          '') rootPools));
        };
  
  