anchor.diff:          response="$(ykchalresp -${toString yubikey.slot} -x $challenge 2>/dev/null)"
   
           for try in $(seq 3); do
  -
               ${optionalString yubikey.twoFactor ''
               echo -n "Enter two-factor passphrase: "
  -            read -s k_user
  +            read -rs k_user
               echo
               ''}
   
  
positive.code:       ''}
      '';
  
      boot.initrd.preLVMCommands = concatStrings (mapAttrsToList openCommand preLVM);
      boot.initrd.postDeviceCommands = concatStrings (mapAttrsToList openCommand postLVM);
  
      environment.systemPackages = [ pkgs.cryptsetup ];
    };
  
negative.code: 
          if [ "$opened" == false ]; then
              umount ${yubikey.storage.mountPoint}
              die "Maximum authentication errors reached"
          fi
  
          echo -n "Gathering entropy for new salt (please enter random keys to generate entropy if this blocks for long)..."
  