anchor.diff:            Path to a file that contains the password used for SMTP auth. The file
             should not contain a trailing newline, if the password does not contain one.
             This file should be readable by the users that need to execute ssmtp.
  -
  -          <option>authPassFile</option> takes precedence over <option>authPass</option>.
  -
  -          Warning: when <option>authPass</option> is non-empty <option>authPassFile</option>
  -          defaults to a file in the WORLD-READABLE Nix store containing that password.
           '';
         };
   
  
positive.code: 
  
    config = mkIf cfg.enable {
  
      services.ssmtp.authPassFile = mkIf (cfg.authPass != "")
        (mkDefault (toString (pkgs.writeTextFile {
          name = "ssmtp-authpass";
          text = cfg.authPass;
        })));
  
      services.ssmtp.settings = mkMerge [
        ({
  
negative.code:     (mkRenamedOptionModule [ "networking" "defaultMailServer" "useTLS" ] [ "services" "ssmtp" "useTLS" ])
      (mkRenamedOptionModule [ "networking" "defaultMailServer" "useSTARTTLS" ] [ "services" "ssmtp" "useSTARTTLS" ])
      (mkRenamedOptionModule [ "networking" "defaultMailServer" "authUser" ] [ "services" "ssmtp" "authUser" ])
      (mkRenamedOptionModule [ "networking" "defaultMailServer" "authPassFile" ] [ "services" "ssmtp" "authPassFile" ])
      (mkRenamedOptionModule [ "networking" "defaultMailServer" "setSendmail" ] [ "services" "ssmtp" "setSendmail" ])
  
      (mkRemovedOptionModule [ "networking" "defaultMailServer" "authPass" ] "authPass has been removed since it leaks the clear-text password into the world-readable store. Use authPassFile instead and make sure it's not a store path")
      (mkRemovedOptionModule [ "services" "ssmtp" "authPass" ] "authPass has been removed since it leaks the clear-text password into the world-readable store. Use authPassFile instead and make sure it's not a store path")
    ];
  
    options = {
  