anchor.diff:  
         environment = {
           KEA_PIDFILE_DIR = "/run/kea";
  +        KEA_LOCKFILE_DIR = "/run/kea";
         };
   
         restartTriggers = [
  
positive.code: 
        serviceConfig = {
          ExecStart = "${package}/bin/kea-dhcp-ddns -c /etc/kea/dhcp-ddns.conf ${lib.escapeShellArgs cfg.dhcp-ddns.extraArgs}";
          AmbientCapabilites = [
            "CAP_NET_BIND_SERVICE"
          ];
          CapabilityBoundingSet = [
  
negative.code: 
        environment = {
          KEA_PIDFILE_DIR = "/run/kea";
          KEA_LOCKFILE_DIR = "/run/kea";
        };
  
        restartTriggers = [
  