anchor.diff:                # arguments to $(tahoe start). The node directory must come first,
                 # and arguments which alter Twisted's behavior come afterwards.
                 ExecStart = ''
  -                ${settings.package}/bin/tahoe start ${nodedir} -n -l- --pidfile=${pidfile}
  +                ${settings.package}/bin/tahoe start ${lib.escapeShellArg nodedir} -n -l- --pidfile=${lib.escapeShellArg pidfile}
                 '';
               };
               preStart = ''
  -              if [ \! -d ${nodedir} ]; then
  +              if [ ! -d ${lib.escapeShellArg nodedir} ]; then
                   mkdir -p /var/db/tahoe-lafs
  -                tahoe create-node --hostname=localhost ${nodedir}
  +                tahoe create-node --hostname=localhost ${lib.escapeShellArg nodedir}
                 fi
   
                 # Tahoe has created a predefined tahoe.cfg which we must now
  
positive.code:               # arguments to $(tahoe start). The node directory must come first,
                # and arguments which alter Twisted's behavior come afterwards.
                ExecStart = ''
                  ${settings.package}/bin/tahoe start ${nodedir} -n -l- --pidfile=${pidfile}
                '';
              };
              preStart = ''
                if [ \! -d ${nodedir} ]; then
                  mkdir -p /var/db/tahoe-lafs
                  tahoe create-introducer ${nodedir}
                fi
  
                # Tahoe has created a predefined tahoe.cfg which we must now
  
negative.code:               # we must do this on every prestart. Fixes welcome.
                # rm ${nodedir}/tahoe.cfg
                # ln -s /etc/tahoe-lafs/introducer-${node}.cfg ${nodedir}/tahoe.cfg
                cp /etc/tahoe-lafs/introducer-"${node}".cfg ${lib.escapeShellArg nodedir}/tahoe.cfg
              '';
            });
          users.extraUsers = flip mapAttrs' cfg.introducers (node: _:
  