anchor.diff:            # programs to be wrapped.
             WRAPPER_PATH=${config.system.path}/bin:${config.system.path}/sbin
   
  +          chmod 755 "${parentWrapperDir}"
  +
             # We want to place the tmpdirs for the wrappers to the parent dir.
             wrapperDir=$(mktemp --directory --tmpdir="${parentWrapperDir}" wrappers.XXXXXXXXXX)
             chmod a+rx $wrapperDir
  
positive.code: 
      boot.specialFileSystems.${parentWrapperDir} = {
        fsType = "tmpfs";
        options = [ "nodev" ];
      };
  
      # Make sure our wrapperDir exports to the PATH env variable when
  
negative.code:             # Atomically replace the symlink
              # See https://axialcorps.com/2013/07/03/atomically-replacing-files-and-directories/
              old=$(readlink -f ${wrapperDir})
              if [ -e ${wrapperDir}-tmp ]; then
                rm --force --recursive ${wrapperDir}-tmp
              fi
              ln --symbolic --force --no-dereference $wrapperDir ${wrapperDir}-tmp
              mv --no-target-directory ${wrapperDir}-tmp ${wrapperDir}
              rm --force --recursive $old
  