anchor.diff:              and a Yubikey to work with this feature.
             '';
       };
  +
  +    boot.initrd.luks.fido2Support = mkOption {
  +      default = false;
  +      type = types.bool;
  +      description = ''
  +        Enables support for authenticating with FIDO2 devices.
  +      '';
  +    };
  +
     };
   
     config = mkIf (luks.devices != {} || luks.forceLuksSupportInInitrd) {
  
positive.code:             });
            };
  
            yubikey = mkOption {
              default = null;
              description = ''
  
negative.code:         $out/bin/gpg-agent --version
          $out/bin/scdaemon --version
        ''}
        ${optionalString luks.fido2Support ''
          $out/bin/fido2luks --version
        ''}
      '';
  
      boot.initrd.preFailCommands = postCommands;
  