anchor.diff:    passthru = rec {
       srcVerification = fetchurl {
         failEarly = true;
  -      pgpsigUrls = map (n: "${n}.asc") tarballUrls;
  -      pgpDecompress = true;
  -      inherit (pgp.samba) pgpKeyFingerprint;
  -      inherit (src) urls outputHash outputHashAlgo;
  +      inherit (src)
  +        urls
  +        outputHash
  +        outputHashAlgo;
  +      fullOpts = {
  +        pgpsigUrls = map (n: "${n}.asc") tarballUrls;
  +        pgpDecompress = true;
  +        inherit (pgp.samba)
  +          pgpKeyFingerprint;
  +      };
       };
   
       pgp = {
  
positive.code:   src = fetchurl {
      urls = map (n: "${n}.gz") tarballUrls;
      hashOutput = false;
      sha256 = "f5044d149e01894a08b1d114b8b69aed78171a7bb19608bd1fd771453b9a5406";
    };
  
    nativeBuildInputs = [
  
negative.code:     optionals
      optionalString;
  
    version = "4.8.5";
    name = "samba${if isClient then "-client" else ""}-${version}";
  
    tarballUrls = [
  