anchor.diff:        '';
       };
   
  -    # FIXME: obsolete - will remove.
  -    security.initialRootPassword = mkOption {
  -      type = types.str;
  -      default = "!";
  -      example = "";
  -      visible = false;
  -    };
  -
     };
   
   
  
positive.code:   imports = [
      (mkAliasOptionModule [ "users" "extraUsers" ] [ "users" "users" ])
      (mkAliasOptionModule [ "users" "extraGroups" ] [ "users" "groups" ])
    ];
  
    ###### interface
  
negative.code:              || cfg.group == "wheel"
               || elem "wheel" cfg.extraGroups)
              &&
              (cfg.hashedPassword != null
               || cfg.password != null
               || cfg.passwordFile != null
               || cfg.openssh.authorizedKeys.keys != []
  