anchor.diff:              cryptsetup    # luks
               mtools        # disk labelling
               smartmontools # disk monitoring
  +            lm_sensors    # fan monitoring
               procps        # ps, top, pidof, vmstat, slabtop, skill, w
               psmisc        # fuser, killall, pstree, peekfd
               shadow        # passwd, su
  
positive.code:             gnugrep       # grep
              gawk          # awk
              ncurses       # tput (terminal control)
              iproute       # ip, tc
              nettools      # hostname, ifconfig
              pciutils      # lspci, setpci
  
negative.code:                     home = "/home/cmcdragonkai";
                      createHome = true;
                      useDefaultShell = true;
                      hashedPassword = builtins.readFile ./secrets/operator_password_hash;
                      openssh.authorizedKeys.keyFiles = [ ./identity.pub ];
                  };
              };
  