anchor.diff:            LOCALE_ARCHIVE = "/var/run/current-system/sw/lib/locale/locale-archive";
           };
   
  +        path = [ pkgs.openssh pkgs.gnused ];
  +
           preStart =
             ''
               ${mkAuthkeyScript}
  
positive.code:         local authKeys="$2"
          local authKeyFiles="$3"
          local preserveExisting="$4"
          IFS=","
  
          for f in $authKeyFiles; do
            if [ -f "$f" ]; then
              authKeys="$(${pkgs.coreutils}/bin/cat "$f") ${marker1},$authKeys"
            fi
          done
  
          if [ -n "$authKeys" ]; then
            eval authfile=~$userName/.ssh/authorized_keys
            ${pkgs.coreutils}/bin/mkdir -p "$(dirname $authfile)"
            ${pkgs.coreutils}/bin/touch "$authfile"
            if [ "$preserveExisting" == "false" ]; then
              rm -f "$authfile"
              authKeys="${marker2},$authKeys"
            else
              ${pkgs.gnused}/bin/sed -i '/${marker1}/ d' "$authfile"
            fi
            for key in $authKeys; do ${pkgs.coreutils}/bin/echo "$key" >> "$authfile"; done
          fi
  
          unset IFS
        }
        ${userLoop}
      '';
  
  
negative.code:             mkdir -m 0755 -p /etc/ssh
  
              if ! test -f /etc/ssh/ssh_host_${hktn}_key; then
                  ssh-keygen -t ${hktn} -b ${toString hktb} -f /etc/ssh/ssh_host_${hktn}_key -N ""
              fi
            '';
  
  