anchor.diff:        {
           assertion = cfg.security.secretKeyFile != opt.security.secretKeyFile.default -> cfg.security.secretKeyFile == null;
           message = "Cannot set both secretKey and secretKeyFile";
  +      }
  +      {
  +        assertion = cfg.smtp.password != opt.smtp.password.default -> cfg.smtp.passwordFile == null;
  +        message = "Cannot set both password and secretKeyFile";
         }
       ];
   
  
positive.code:         description = "Secret key used for signing.";
          default = null;
          type = types.nullOr types.path;
        };
      };
  
  
negative.code:     AUTH_ANONYMOUS_ORG_ROLE = cfg.auth.anonymous.org_role;
  
      ANALYTICS_REPORTING_ENABLED = boolToString cfg.analytics.reporting.enable;
  
      SMTP_ENABLE = boolToString cfg.smtp.enable;
      SMTP_HOST = cfg.smtp.host;
      SMTP_USER = cfg.smtp.user;
      SMTP_PASSWORD = cfg.smtp.password;
      SMTP_FROM_ADDRESS = cfg.smtp.fromAddress;
    } // cfg.extraOptions;
  
  in {
  