anchor.diff:  , replace, fetchurl, zip, unzip, jq, xdg-utils, writeText
   
   ## various stuff that can be plugged in
  -, ffmpeg, xorg, alsa-lib, libpulseaudio, libcanberra-gtk3, libglvnd, libnotify
  +, ffmpeg, xorg, alsa-lib, libpulseaudio, libcanberra-gtk3, libglvnd, libnotify, opensc
   , gnome/*.gnome-shell*/
   , browserpass, chrome-gnome-shell, uget-integrator, plasma5Packages, bukubrow, pipewire
   , tridactyl-native
  
positive.code:               Install = lib.foldr (e: ret:
                  ret ++ [ "${e.outPath}/${e.extid}.xpi" ]
                  ) [] extensions;
              };
            }
          // extraPolicies;
  
negative.code:       gssSupport = browser.gssSupport or false;
        alsaSupport = browser.alsaSupport or false;
        pipewireSupport = browser.pipewireSupport or false;
        # PCSC-Lite daemon (services.pcscd) also must be enabled for firefox to access smartcards
        smartcardSupport = cfg.smartcardSupport or false;
  
        nativeMessagingHosts =
          ([ ]
  