anchor.diff: -{ lib, stdenv, fetchurl, openssl, db, groff, libtool
  +{ lib, stdenv, fetchurl, openssl, db, groff, libtool, libsodium
   , withCyrusSasl ? true
   , cyrus_sasl
   }:
  
positive.code:   postInstall = ''
      make $installFlags install -C contrib/slapd-modules/passwd/sha2
      make $installFlags install -C contrib/slapd-modules/passwd/pbkdf2
      chmod +x "$out"/lib/*.{so,dylib}
    '';
  
  
negative.code: 
    nativeBuildInputs = [ groff ];
  
    buildInputs = [ openssl cyrus_sasl db libsodium libtool ];
  
    # Disable install stripping as it breaks cross-compiling.
    # We strip binaries anyway in fixupPhase.
  