anchor.diff:                  };
   
                   mountPoint = mkOption {
  -                  default = "/crypt-challenge";
  +                  default = "/crypt-storage";
                     type = types.string;
                     description = "TODO";
                   };
   
  -                file = mkOption {
  -                  default = "/crypt-challenge";
  +                path = mkOption {
  +                  default = "/crypt-storage/default";
                     type = types.string;
                     description = "TODO";
                   };
                 };
  -            };
  -
  -            ramfsMountPoint = mkOption {
  -              default = "/crypt-update";
  -              type = types.string;
  -              description = "TODO";
               };
             };
           };
  
positive.code:         cp -pdvn $lib $out/lib
          cp -pvn $(readlink -f $lib) $out/lib
        done
        ''}
      '';
  
  
negative.code:       ${optionalString luks.yubikeySupport ''
          $out/bin/uuidgen --version
          $out/bin/ykchalresp -V
          $out/bin/ykinfo -V
          cat > $out/bin/openssl-wrap <<EOF
  #!$out/bin/sh
  export OPENSSL_CONF=$out/etc/ssl/openssl.cnf
  $out/bin/openssl "\$@"
  EOF
          $out/bin/openssl-wrap version
        ''}
      '';
  
  