anchor.diff: -{ stdenv, lib, fetchFromGitHub, fetchpatch, go-md2man
  +{ stdenv, lib, fetchFromGitHub, fetchpatch, removeReferencesTo, go-md2man
   , go, pkgconfig, libapparmor, apparmor-parser, libseccomp }:
   
   with lib;
  
positive.code:   '';
  
    preFixup = ''
      # remove references to go compiler
      while read file; do
        sed -ri "s,${go},$(echo "${go}" | sed "s,$NIX_STORE/[^-]*,$NIX_STORE/eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee,"),g" $file
      done < <(find $out/bin -type f 2>/dev/null)
    '';
  
    meta = {
  
negative.code: 
    hardeningDisable = ["fortify"];
  
    buildInputs = [ removeReferencesTo go-md2man go pkgconfig libseccomp libapparmor apparmor-parser ];
  
    makeFlags = ''BUILDTAGS+=seccomp BUILDTAGS+=apparmor'';
  
  