anchor.diff:        hashedPassword = mkOption {
           type = with types; nullOr (passwdEntry str);
           default = null;
  -        description = ''
  +        description = lib.mdDoc ''
             Specifies the hashed password for the user.
             ${passwordDescription}
             ${hashedPasswordDescription}
  
positive.code:       password = mkOption {
          type = with types; nullOr str;
          default = null;
          description = ''
            Specifies the (clear text) password for the user.
            Warning: do not set confidential information here
            because it is world-readable in the Nix store. This option
  
negative.code:       ]);
  
    passwordDescription = ''
      The options {option}`hashedPassword`,
      {option}`password` and {option}`passwordFile`
      controls what password is set for the user.
      {option}`hashedPassword` overrides both
      {option}`password` and {option}`passwordFile`.
      {option}`password` overrides {option}`passwordFile`.
      If none of these three options are set, no password is assigned to
      the user, and the user will not be able to do password logins.
      If the option {option}`users.mutableUsers` is true, the
      password defined in one of the three options will only be set when
      the user is created for the first time. After that, you are free to
      change the password with the ordinary user management commands. If
      {option}`users.mutableUsers` is false, you cannot change
      user passwords, they will always be set according to the password
      options.
    '';
  
    hashedPasswordDescription = ''
      To generate a hashed password run `mkpasswd -m sha-512`.
  
      If set to an empty string (`""`), this user will
      be able to log in without being asked for a password (but not via remote
      services such as SSH, or indirectly via {command}`su` or
      {command}`sudo`). This should only be used for e.g. bootable
      live systems. Note: this is different from setting an empty password,
      which can be achieved using {option}`users.users.<name?>.password`.
  
      If set to `null` (default) this user will not
      be able to log in using a password (i.e. via {command}`login`
      command).
    '';
  
  