anchor.diff:                description = "TODO";
               };
   
  -            yubikeySlot = mkOption {
  +            slot = mkOption {
                 default = 2;
                 type = types.int;
                 description = "TODO";
               };
   
  -            luksKeySlot = mkOption {
  -              default = 1;
  -              type = types.int;
  -              description = "TODO";
  -            };
  -
  -            challenge = mkOption {
  +            storage = mkOption {
                 type = types.optionSet;
                 description = "TODO";
   
  
positive.code:                 };
  
                  mountPoint = mkOption {
                    default = "/crypt-challenge";
                    type = types.string;
                    description = "TODO";
                  };
  
                  file = mkOption {
                    default = "/crypt-challenge";
                    type = types.string;
                    description = "TODO";
                  };
                };
              };
  
              ramfsMountPoint = mkOption {
                default = "/crypt-update";
                type = types.string;
                description = "TODO";
              };
            };
          };
  
negative.code:         cp -pdvn $lib $out/lib
          cp -pvn $(readlink -f $lib) $out/lib
        done
  
        ${optionalString luks.yubikeySupport ''
        cp -pdv ${pkgs.utillinux}/bin/uuidgen $out/bin
        for lib in $(ldd $out/bin/uuidgen |grep '=>' |grep /nix/store/ |cut -d' ' -f3); do
  