anchor.diff:      default = false;
       description = ''
         This option enables Mullvad VPN daemon.
  +      This sets <option>networking.firewall.checkReversePath</option> to "loose", which might be undesirable for security.
       '';
     };
   
  
positive.code:     };
    };
  
    meta.maintainers = [ maintainers.xfix ];
  }
  
negative.code: 
      # mullvad-daemon writes to /etc/iproute2/rt_tables
      networking.iproute2.enable = true;
  
      # See https://github.com/NixOS/nixpkgs/issues/113589
      networking.firewall.checkReversePath = "loose";
  
      systemd.services.mullvad-daemon = {
        description = "Mullvad VPN daemon";
  