anchor.diff:          for try in $(seq 3); do
               ${optionalString yubikey.twoFactor ''
               echo -n "Enter two-factor passphrase: "
  -            read -rs k_user
  +            read -r k_user
               echo
               ''}
   
  
positive.code: 
      # For Yubikey salt storage
      mkdir -p /crypt-storage
    '';
  
    postCommands = ''
      umount /crypt-storage 2>/dev/null
      umount /crypt-ramfs 2>/dev/null
    '';
  
negative.code:                     # ask cryptsetup-askpass
                      echo -n "${device}" > /crypt-ramfs/device
  
                      # and try reading it from /dev/console with a timeout
                      IFS= read -t 1 -r passphrase
                      if [ -n "$passphrase" ]; then
                         ${if luks.reusePassphrases then ''
                           # remember it for the next device
  