anchor.diff:              PIDFile = "/run/nscd/nscd.pid";
               Restart = "always";
               ExecReload =
  -              [ "${cfg.package}/bin/nscd --invalidate passwd"
  +              [
  +                "${cfg.package}/bin/nscd --invalidate passwd"
                   "${cfg.package}/bin/nscd --invalidate group"
                   "${cfg.package}/bin/nscd --invalidate hosts"
                 ];
  
positive.code:         # sill want to read their configuration files after the privilege drop
          # and so users can set the owner of those files to the nscd user.
          serviceConfig =
            { ExecStart = "!@${cfg.package}/bin/nscd nscd";
              Type = "forking";
              User = cfg.user;
              Group = cfg.group;
  
negative.code: 
        package = mkOption {
          type = types.package;
          default =
            if pkgs.stdenv.hostPlatform.libc == "glibc"
            then pkgs.stdenv.cc.libc.bin
            else pkgs.glibc.bin;
          defaultText = lib.literalExpression ''
  