anchor.diff:                Install = lib.foldr (e: ret:
                   ret ++ [ "${e.outPath}/${e.extid}.xpi" ]
                   ) [] extensions;
  +            };
  +          } // lib.optionalAttrs smartcardSupport {
  +            SecurityDevices = {
  +              "OpenSC PKCS#11 Module" = "onepin-opensc-pkcs11.so";
               };
             }
           // extraPolicies;
  
positive.code: , replace, fetchurl, zip, unzip, jq, xdg-utils, writeText
  
  ## various stuff that can be plugged in
  , ffmpeg, xorg, alsa-lib, libpulseaudio, libcanberra-gtk3, libglvnd, libnotify
  , gnome/*.gnome-shell*/
  , browserpass, chrome-gnome-shell, uget-integrator, plasma5Packages, bukubrow, pipewire
  , tridactyl-native
  
negative.code:       gssSupport = browser.gssSupport or false;
        alsaSupport = browser.alsaSupport or false;
        pipewireSupport = browser.pipewireSupport or false;
        # PCSC-Lite daemon (services.pcscd) also must be enabled for firefox to access smartcards
        smartcardSupport = cfg.smartcardSupport or false;
  
        nativeMessagingHosts =
          ([ ]
  