anchor.diff:        "''${ro_mounts[@]}"
         "''${symlinks[@]}"
         "''${auto_mounts[@]}"
  +      ${concatStringsSep "\n  " extraBwrapArgs}
         ${init runScript}/bin/${name}-init ${initArgs}
       )
       exec "''${cmd[@]}"
  
positive.code:   buildFHSEnv = callPackage ./env.nix { };
  
    env = buildFHSEnv (removeAttrs args [
      "runScript" "extraInstallCommands" "meta" "passthru" "dieWithParent"
      "unshareUser" "unshareCgroup" "unshareUts" "unshareNet" "unsharePid" "unshareIpc"
    ]);
  
  
negative.code: , extraInstallCommands ? ""
  , meta ? {}
  , passthru ? {}
  , extraBwrapArgs ? []
  , unshareUser ? true
  , unshareIpc ? true
  , unsharePid ? true
  