anchor.diff:    imports = [
       (mkAliasOptionModule [ "users" "extraUsers" ] [ "users" "users" ])
       (mkAliasOptionModule [ "users" "extraGroups" ] [ "users" "groups" ])
  +    (mkChangedOptionModule
  +      [ "security" "initialRootPassword" ]
  +      [ "users" "users" "root" "initialHashedPassword" ]
  +      (cfg: if cfg.security.initialHashedPassword == "!"
  +            then null
  +            else cfg.security.initialHashedPassword))
     ];
   
     ###### interface
  
positive.code:       '';
      };
  
      # FIXME: obsolete - will remove.
      security.initialRootPassword = mkOption {
        type = types.str;
        default = "!";
        example = "";
        visible = false;
      };
  
    };
  
  
  
negative.code:         home = "/root";
          shell = mkDefault cfg.defaultUserShell;
          group = "root";
        };
        nobody = {
          uid = ids.uids.nobody;
  