anchor.diff:  
           virtualHosts.lockedroot = {
             inherit root;
  -          basicAuth.alice = "jane";
  +          basicAuth.alice = "pwofa";
           };
   
           virtualHosts.lockedsubdir = {
             inherit root;
             locations."/sublocation/" = {
               alias = "${root}/";
  -            basicAuth.bob = "john";
  +            basicAuth.bob = "pwofb";
             };
           };
         };
  
positive.code:         "curl --fail --resolve lockedsubdir:80:127.0.0.1 http://lockedsubdir/sublocation/index.html"
      )
      webserver.succeed(
          "curl --fail --resolve lockedsubdir:80:127.0.0.1 http://bob:john@lockedsubdir/sublocation/index.html"
      )
    '';
  })
  
negative.code: 
      webserver.fail("curl --fail --resolve lockedroot:80:127.0.0.1 http://lockedroot")
      webserver.succeed(
          "curl --fail --resolve lockedroot:80:127.0.0.1 http://alice:pwofa@lockedroot"
      )
  
      webserver.succeed("curl --fail --resolve lockedsubdir:80:127.0.0.1 http://lockedsubdir")
  