anchor.diff:            Whether to periodically scan for (better) networks when the signal of
             the current one is low. This will make roaming between access points
             faster, but will consume more power.
  +        '';
  +      };
  +
  +      fallbackToWPA2 = mkOption {
  +        type = types.bool;
  +        default = true;
  +        description = ''
  +          Whether to fall back to WPA2 authentication protocols if WPA3 failed.
  +          This allows old wireless cards (that lack recent features required by
  +          WPA3) to connect to mixed WPA2/WPA3 access points.
  +
  +          To avoid possible downgrade attacks, disable this options.
           '';
         };
   
  
positive.code:       else opts.pskRaw;
  
      options = [
        "ssid=${quote ssid}"
        (if pskString != null || opts.auth != null
          then "key_mgmt=${concatStringsSep " " opts.authProtocols}"
          else "key_mgmt=NONE")
  
negative.code:   finalConfig = ''"$RUNTIME_DIRECTORY"/wpa_supplicant.conf'';
  
    # Creates a network block for wpa_supplicant.conf
    mkNetwork = opts:
    let
      quote = x: ''"${x}"'';
      indent = x: "  " + x;
  