anchor.diff:          example = "/private/wireguard_psk";
           type = with types; nullOr str;
           description = ''
  -          File pointing to preshared key as generated by wg pensk. Optional,
  -          and may be omitted. This option adds an additional layer of
  +          File pointing to preshared key as generated by <command>wg pensk</command>.
  +          Optional, and may be omitted. This option adds an additional layer of
             symmetric-key cryptography to be mixed into the already existing
             public-key cryptography, for post-quantum resistance.
           '';
  
positive.code:         default = false;
          type = types.bool;
          description = ''
            Automatically generate a private key with `wg genkey`,
            at the privateKeyFile location.
          '';
        };
  
  
negative.code:         example = "rVXs/Ni9tu3oDBLS4hOyAUAa1qTWVA3loR8eL20os3I=";
          type = with types; nullOr str;
          description = ''
            Base64 preshared key generated by <command>wg genpsk</command>.
            Optional, and may be omitted. This option adds an additional layer of
            symmetric-key cryptography to be mixed into the already existing
            public-key cryptography, for post-quantum resistance.
  
  