anchor.diff:              fi
           done
   
  -        if [ "$opened" == false ]; then
  -            umount ${yubikey.storage.mountPoint}
  -            die "Maximum authentication errors reached"
  -        fi
  +        [ "$opened" == false ] && die "Maximum authentication errors reached"
   
           echo -n "Gathering entropy for new salt (please enter random keys to generate entropy if this blocks for long)..."
           for i in $(seq ${toString yubikey.saltLength}); do
  
positive.code:                     description = "The filesystem of the unencrypted device.";
                    };
  
                    mountPoint = mkOption {
                      default = "/crypt-storage";
                      type = types.str;
                      description = "Path where the unencrypted device will be mounted during early boot.";
                    };
  
                    path = mkOption {
                      default = "/crypt-storage/default";
                      type = types.str;
  
negative.code:     # Warning: Do NOT replace with tmpfs!
      mkdir -p /crypt-ramfs
      mount -t ramfs none /crypt-ramfs
  
      # For Yubikey salt storage
      mkdir -p /crypt-storage
    '';
  
    postCommands = ''
      umount /crypt-storage 2>/dev/null
      umount /crypt-ramfs 2>/dev/null
    '';
  
  