anchor.diff:      dataDir = mkOption {
         default = "/var/lib/cfssl";
         type = types.path;
  -      description = "Cfssl work directory.";
  +      description = ''
  +        The work directory for CFSSL.
  +
  +        <note><para>
  +          If left as the default value this directory will automatically be
  +          created before the CFSSL server starts, otherwise you are
  +          responsible for ensuring the directory exists with appropriate
  +          ownership and permissions.
  +        </para></note>
  +      '';
       };
   
       address = mkOption {
  
positive.code: 
      users.extraUsers.cfssl = {
        description = "cfssl user";
        createHome = true;
        home = cfg.dataDir;
        group = "cfssl";
        uid = config.ids.uids.cfssl;
  
negative.code: { config, options, lib, pkgs, ... }:
  
  with lib;
  
  