anchor.diff:        example = {
           alice = {
             uid = 1234;
  -          description = "Alice";
  +          description = "Alice Q. User";
             home = "/home/alice";
             createHome = true;
             group = "users";
             extraGroups = ["wheel"];
             shell = "/bin/sh";
  -          password = "foobar";
           };
         };
         description = ''
  
positive.code:       createUser = mkOption {
          type = types.bool;
          default = true;
          description = "
            Indicates if the user should be created automatically as a local user.
            Set this to false if the user for instance is an LDAP user. NixOS will
            then not modify any of the basic properties for the user account.
          ";
        };
  
        isAlias = mkOption {
  
negative.code:       password = mkOption {
          type = with types; uniq (nullOr str);
          default = null;
          description = ''
            The user's password. If undefined, no password is set for
            the user.  Warning: do not set confidential information here
            because it is world-readable in the Nix store.  This option
            should only be used for public accounts such as
            <literal>guest</literal>.
          '';
        };
  
        isSystemUser = mkOption {
  