anchor.diff:          description = "hans client - ${name}";
           after = [ "network.target" ];
           wantedBy = [ "multi-user.target" ];
  +        preStart = ''
  +          cat > /run/hans/${name}-script << EOF
  +            #!/bin/sh
  +            ${pkgs.hans}/bin/hans -f -u ${hansUser} ${cfg.extraConfig} -c ${cfg.server} ${optionalString (cfg.passwordFile != "") "-p $(cat \"${cfg.passwordFile}\")"} 
  +          EOF
  +          chmod 700 /run/hans/${name}-script
  +        '';
  +        script = "/run/hans/${name}-script";
           serviceConfig = {
             RestartSec = "30s";
             Restart = "always";
  -          ExecStart = "${pkgs.hans}/bin/hans -f -u ${hansUser} ${cfg.extraConfig} -c ${cfg.server}";
  +          RuntimeDirectory = [ "hans" ];
           };
         };
       in
  
positive.code:         description = "hans, ip over icmp server daemon";
          after = [ "network.target" ];
          wantedBy = [ "multi-user.target" ];
          serviceConfig.ExecStart = "${pkgs.hans}/bin/hans -f -u ${hansUser} ${cfg.server.extraConfig} -s ${cfg.server.ip} ${optionalString cfg.server.systemPings "-r"}";
        };
      };
  
  
negative.code:         {
            foo = {
              server = "192.0.2.1";
              extraConfig = "-v";
            }
          }
          '';
  