anchor.diff:    ];
   
     environment = {
  -    etc = [
  +    etc = ifEnabled [
         (allowdeny "allow" (["root"] ++ cfg.allow))
         (allowdeny "deny" cfg.deny)
         # see man 5 fcron.conf
  
positive.code:   #systemCronJobs =
    #  config.services.cron.systemCronJobs;
    cfg = config.services.fcron;
    queuelen = if cfg.queuelen == "" then "" else "-q ${toString cfg.queuelen}";
  
    # shell is set to /sh in config..
  
negative.code:   };
  
    services = {
      extraJobs = ifEnabled [{
        name = "fcron";
  
        job = ''
  