anchor.diff:      destroyVM_test1;
       destroyVM_test2;
     '';
  +} // mapAttrs (mkVBoxTest true vboxVMsWithExtpack) {
  +  enable-extension-pack = ''
  +    createVM_testExtensionPack;
  +    vbm("startvm testExtensionPack");
  +    waitForStartup_testExtensionPack;
  +    $machine->screenshot("cli_started");
  +    waitForVMBoot_testExtensionPack;
  +    $machine->screenshot("cli_booted");
  +
  +    $machine->nest("Checking for privilege escalation", sub {
  +      $machine->fail("test -e '/root/VirtualBox VMs'");
  +      $machine->fail("test -e '/root/.config/VirtualBox'");
  +      $machine->succeed("test -e '/home/alice/VirtualBox VMs'");
  +    });
  +
  +    shutdownVM_testExtensionPack;
  +    destroyVM_testExtensionPack;
  +  '';
   }
  
positive.code:     headless.services.xserver.enable = false;
    };
  
    mkVBoxTest = name: testScript: makeTest {
      name = "virtualbox-${name}";
  
      machine = { lib, config, ... }: {
        imports = let
          mkVMConf = name: val: val.machine // { key = "${name}-config"; };
          vmConfigs = mapAttrsToList mkVMConf vboxVMs;
        in [ ./common/user-account.nix ./common/x11.nix ] ++ vmConfigs;
        virtualisation.memorySize = 2048;
        virtualisation.virtualbox.host.enable = true;
  
negative.code:     "--hostonlyadapter2 vboxnet0"
    ];
  
    # The VirtualBox Oracle Extension Pack lets you use USB 3.0 (xHCI).
    enableExtensionPackVMFlags = [
      "--usbxhci on"
    ];
  
    dhcpScript = pkgs: ''
      ${pkgs.dhcp}/bin/dhclient \
        -lf /run/dhcp.leases \
  