anchor.diff:      (mkRenamedOptionModule [ "networking" "defaultMailServer" "useTLS" ] [ "services" "ssmtp" "useTLS" ])
       (mkRenamedOptionModule [ "networking" "defaultMailServer" "useSTARTTLS" ] [ "services" "ssmtp" "useSTARTTLS" ])
       (mkRenamedOptionModule [ "networking" "defaultMailServer" "authUser" ] [ "services" "ssmtp" "authUser" ])
  -    (mkRenamedOptionModule [ "networking" "defaultMailServer" "authPass" ] [ "services" "ssmtp" "authPass" ])
       (mkRenamedOptionModule [ "networking" "defaultMailServer" "authPassFile" ] [ "services" "ssmtp" "authPassFile" ])
       (mkRenamedOptionModule [ "networking" "defaultMailServer" "setSendmail" ] [ "services" "ssmtp" "setSendmail" ])
  +
  +    (mkRemovedOptionModule [ "networking" "defaultMailServer" "authPass" ] "authPass has been removed since it leaks the clear-text password into the world-readable store. Use authPassFile instead and make sure it's not a store path")
  +    (mkRemovedOptionModule [ "services" "ssmtp" "authPass" ] "authPass has been removed since it leaks the clear-text password into the world-readable store. Use authPassFile instead and make sure it's not a store path")
     ];
   
     options = {
  
positive.code:         '';
        };
  
        authPass = mkOption {
          type = types.str;
          default = "";
          example = "correctHorseBatteryStaple";
          description = ''
            Password used for SMTP auth. (STORED PLAIN TEXT, WORLD-READABLE IN NIX STORE)
  
            It's recommended to use <option>authPassFile</option>
            which takes precedence over <option>authPass</option>.
          '';
        };
  
        authPassFile = mkOption {
          type = types.nullOr types.str;
          default = null;
  
negative.code: 
  
    config = mkIf cfg.enable {
  
      services.ssmtp.settings = mkMerge [
        ({
  