anchor.diff:            daemon reads in addition to the the user's authorized_keys file.
             You can combine the <literal>keys</literal> and
             <literal>keyFiles</literal> options.
  -          Warning: If you are using <literal>NixOps</literal> then don't use this 
  +          Warning: If you are using <literal>NixOps</literal> then don't use this
             option since it will replace the key required for deployment via ssh.
           '';
         };
  
positive.code:         default = [22];
          description = ''
            Specifies on which ports the SSH daemon listens.
          '';
        };
  
  
negative.code: 
        };
  
      networking.firewall.allowedTCPPorts = if cfg.openFirewall then cfg.ports else [];
  
      security.pam.services.sshd =
        { startSession = true;
  