anchor.diff:      optionals
       optionalString;
   
  -  version = "4.8.4";
  +  version = "4.8.5";
     name = "samba${if isClient then "-client" else ""}-${version}";
   
     tarballUrls = [
  
positive.code:   src = fetchurl {
      urls = map (n: "${n}.gz") tarballUrls;
      hashOutput = false;
      sha256 = "f5044d149e01894a08b1d114b8b69aed78171a7bb19608bd1fd771453b9a5406";
    };
  
    nativeBuildInputs = [
  
negative.code:   passthru = rec {
      srcVerification = fetchurl {
        failEarly = true;
        inherit (src)
          urls
          outputHash
          outputHashAlgo;
        fullOpts = {
          pgpsigUrls = map (n: "${n}.asc") tarballUrls;
          pgpDecompress = true;
          inherit (pgp.samba)
            pgpKeyFingerprint;
        };
      };
  
      pgp = {
  