anchor.diff:        $client->succeed("ssh -o UserKnownHostsFile=/dev/null" .
                          " -o StrictHostKeyChecking=no -i privkey.snakeoil" .
                          " server true");
  +
  +      $client->succeed("ssh -o UserKnownHostsFile=/dev/null" .
  +                       " -o StrictHostKeyChecking=no -i privkey.snakeoil" .
  +                       " server_lazy true");
  +
       };
     '';
   })
  
positive.code:       $client->waitForUnit("network.target");
        $client->succeed("ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no server 'echo hello world' >&2");
        $client->succeed("ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no server 'ulimit -l' | grep 1024");
      };
  
      subtest "configured-authkey", sub {
  
negative.code:         ];
        };
  
      server_lazy =
        { config, pkgs, ... }:
  
        {
          services.openssh = { enable = true; startWhenNeeded = true; };
          security.pam.services.sshd.limits =
            [ { domain = "*"; item = "memlock"; type = "-"; value = 1024; } ];
          users.extraUsers.root.openssh.authorizedKeys.keys = [
            snakeOilPublicKey
          ];
        };
  
      client =
        { config, pkgs, ... }: { };
  
  