anchor.diff:              # Using this has the side effect of creating empty files in /usr/bin/
               optionals cfg.builds.enable [
                 "${pkgs.writeShellScript "buildsrht-keys-wrapper" ''
  -                set -ex
  +                set -e
                   cd /run/sourcehut/buildsrht/subdir
  +                set -x
                   exec -a "$0" ${pkgs.sourcehut.buildsrht}/bin/buildsrht-keys "$@"
                 ''}:/usr/bin/buildsrht-keys"
                 "${pkgs.sourcehut.buildsrht}/bin/master-shell:/usr/bin/master-shell"
  
positive.code:       baseService = {
          path = [ cfg.hg.package ];
          serviceConfig.BindPaths = [ "${cfg.settings."hg.sr.ht".repos}:/var/lib/sourcehut/hgsrht/repos" ];
          serviceConfig.BindReadOnlyPaths = [ "${cfg.settings."ht.sr.ht".changegroup-script}:/var/lib/sourcehut/hgsrht/bin/changegroup-script" ];
        };
        in {
        inherit configIniOfService;
  
negative.code:       baseService = {
          path = [ cfg.git.package ];
          serviceConfig.BindPaths = [ "${cfg.settings."git.sr.ht".repos}:/var/lib/sourcehut/gitsrht/repos" ];
        };
        in {
        inherit configIniOfService;
  