anchor.diff:          "curl --fail --resolve lockedsubdir:80:127.0.0.1 http://lockedsubdir/sublocation/index.html"
       )
       webserver.succeed(
  -        "curl --fail --resolve lockedsubdir:80:127.0.0.1 http://bob:john@lockedsubdir/sublocation/index.html"
  +        "curl --fail --resolve lockedsubdir:80:127.0.0.1 http://bob:pwofb@lockedsubdir/sublocation/index.html"
       )
     '';
   })
  
positive.code: 
      webserver.fail("curl --fail --resolve lockedroot:80:127.0.0.1 http://lockedroot")
      webserver.succeed(
          "curl --fail --resolve lockedroot:80:127.0.0.1 http://alice:jane@lockedroot"
      )
  
      webserver.succeed("curl --fail --resolve lockedsubdir:80:127.0.0.1 http://lockedsubdir")
  
negative.code: 
          virtualHosts.lockedroot = {
            inherit root;
            basicAuth.alice = "pwofa";
          };
  
          virtualHosts.lockedsubdir = {
            inherit root;
            locations."/sublocation/" = {
              alias = "${root}/";
              basicAuth.bob = "pwofb";
            };
          };
        };
  