anchor.diff:    ];
   
     checkPeer = checkUnitConfig "Peer" [
  -    (assertOnlyFields ["Name" "MACAddress"])
  +    (assertOnlyFields [
  +      "Name"
  +      "MACAddress"
  +    ])
       (assertMacAddress "MACAddress")
     ];
   
     tunTapChecks = [
  -    (assertOnlyFields ["OneQueue" "MultiQueue" "PacketInfo" "VNetHeader" "User" "Group"])
  +    (assertOnlyFields [
  +      "OneQueue"
  +      "MultiQueue"
  +      "PacketInfo"
  +      "VNetHeader"
  +      "User"
  +      "Group"
  +    ])
       (assertValueOneOf "OneQueue" boolValues)
       (assertValueOneOf "MultiQueue" boolValues)
       (assertValueOneOf "PacketInfo" boolValues)
  
positive.code: 
    checkDhcpServer = checkUnitConfig "DHCPServer" [
      (assertOnlyFields [
        "PoolOffset" "PoolSize" "DefaultLeaseTimeSec" "MaxLeaseTimeSec"
        "EmitDNS" "DNS" "EmitNTP" "NTP" "EmitRouter" "EmitTimezone" "Timezone"
      ])
      (assertValueOneOf "EmitDNS" boolValues)
      (assertValueOneOf "EmitNTP" boolValues)
  
negative.code: 
    checkRoutingPolicyRule = checkUnitConfig "RoutingPolicyRule" [
      (assertOnlyFields [
        "TypeOfService"
        "From"
        "To"
        "FirewallMark"
        "Table"
        "Priority"
        "IncomingInterface"
        "OutgoingInterface"
        "SourcePort"
        "DestinationPort"
        "IPProtocol"
        "InvertRule"
        "Family"
      ])
      (assertRange "TypeOfService" 0 255)
      # The following check won't work on nix <= 2.2
  