anchor.diff:  
     inherit (lib) mkOption mkIf singleton;
   
  -  inherit (pkgs) heimdal;
  +  inherit (pkgs) heimdalFull;
   
     stateDir = "/var/heimdal";
   in
  
positive.code:         protocol = "tcp";
          user = "root";
          server = "${pkgs.tcp_wrappers}/sbin/tcpd";
          serverArgs = "${pkgs.heimdal}/sbin/kadmind";
        };
  
      systemd.services.kdc = {
  
negative.code: 
    config = mkIf config.services.kerberos_server.enable {
  
      environment.systemPackages = [ heimdalFull ];
  
      services.xinetd.enable = true;
      services.xinetd.services = lib.singleton
  