anchor.diff:  
       users.extraUsers.cfssl = {
         description = "cfssl user";
  -      createHome = true;
         home = cfg.dataDir;
         group = "cfssl";
         uid = config.ids.uids.cfssl;
  
positive.code: { config, lib, pkgs, ... }:
  
  with lib;
  
  
negative.code:     dataDir = mkOption {
        default = "/var/lib/cfssl";
        type = types.path;
        description = ''
          The work directory for CFSSL.
  
          <note><para>
            If left as the default value this directory will automatically be
            created before the CFSSL server starts, otherwise you are
            responsible for ensuring the directory exists with appropriate
            ownership and permissions.
          </para></note>
        '';
      };
  
      address = mkOption {
  