anchor.diff:  
           stopIfChanged = false;
   
  -        path = [ pkgs.openssh ];
  +        path = [ pkgs.openssh pkgs.gawk ];
   
           environment.LD_LIBRARY_PATH = nssModulesPath;
           environment.LOCALE_ARCHIVE = "/run/current-system/sw/lib/locale/locale-archive";
  
positive.code:       hostKeyType = mkOption {
          default = "dsa1024";
          description = ''
            Type of host key to generate (dsa1024/rsa1024/ecdsa521), if
            the file specified by <literal>hostKeyPath</literal> does not
            exist when the service starts.
          '';
  
negative.code: 
              if ! test -f ${cfg.hostKeyPath}; then
                  ssh-keygen -t ${hktn} -b ${toString hktb} -f ${cfg.hostKeyPath} -N ""
              fi
  
              result=$(ssh-keygen -lf ${cfg.hostKeyPath}|awk '{ print ($1>=${toString hktsb}?1:0)}')
              if [ "$result" -ne "1" ]; then
                ERROR="SECURITY ALERT: SSH Host Key is too weak. Generate a strong key NOW."
                echo "$ERROR"
                echo "$ERROR" > /dev/console
              fi
            '';
  
  