anchor.diff:  
       ++ lib.optional withApparmor libapparmor
       ++ lib.optional wantCurl (lib.getDev curl)
  -    ++ lib.optionals withCompression [ bzip2 lz4 xz ]
  +    ++ lib.optionals withCompression [ bzip2 lz4 xz zstd ]
       ++ lib.optional withCryptsetup (lib.getDev cryptsetup.dev)
       ++ lib.optional withEfi gnu-efi
       ++ lib.optional withKexectools kexec-tools
  
positive.code: , gnupg
  , zlib
  , xz
  , tpm2-tss
  , libuuid
  , libapparmor
  
negative.code: 
  , withAnalyze ? true
  , withApparmor ? true
  , withCompression ? true  # adds bzip2, lz4, xz and zstd
  , withCoredump ? true
  , withCryptsetup ? true
  , withDocumentation ? true
  