anchor.diff:      secret=$(cat "${keyOptions.keyFile}")
       dest="${stateDir}/private/${keyName}"
       echo "  secret: \"$secret\"" > "$dest"
  -    ${pkgs.coreutils}/bin/chown ${username}:${username} "$dest"
  -    ${pkgs.coreutils}/bin/chmod 0400 "$dest"
  +    chown ${username}:${username} "$dest"
  +    chmod 0400 "$dest"
     '') cfg.keys);
   
   
  
positive.code:   stateDir = "/var/lib/nsd";
    pidFile = stateDir + "/var/nsd.pid";
  
    nsdPkg = pkgs.nsd.override {
      bind8Stats = cfg.bind8Stats;
      ipv6 = cfg.ipv6;
  
negative.code:       server-key-file:   "${cfg.remoteControl.serverKeyFile}"
        server-cert-file:  "${cfg.remoteControl.serverCertFile}"
  
      ${concatStrings (mapAttrsToList zoneConfigFile zoneConfigs)}
  
      ${cfg.extraConfig}
  