anchor.diff:            BlacklistPlugins=${lib.concatStringsSep ";" cfg.blacklistPlugins}
           '';
         };
  -    } // originalEtc;
  +    } // originalEtc // extraTrustedKeys;
   
       services.dbus.packages = [ pkgs.fwupd ];
   
  
positive.code:           Allow blacklisting specific plugins
          '';
        };
      };
    };
  
  
negative.code:       originalFiles = concatMap (d: map (f: "${d}/${f}") (listFiles "${pkgs.fwupd}/etc/${d}")) copiedDirs;
        mkEtcFile = n: nameValuePair n { source = "${pkgs.fwupd}/etc/${n}"; };
      in listToAttrs (map mkEtcFile originalFiles);
    extraTrustedKeys =
      let
        mkName = p: "pki/fwupd/${baseNameOf (toString p)}";
        mkEtcFile = p: nameValuePair (mkName p) { source = p; };
      in listToAttrs (map mkEtcFile cfg.extraTrustedKeys);
  in {
  
    ###### interface
  