anchor.diff:                  The network's pre-shared key in plaintext defaulting
                   to being a network without any authentication.
   
  -                Be aware that these will be written to the nix store
  -                in plaintext!
  -
  -                Mutually exclusive with <varname>pskRaw</varname>.
  +                <warning><para>
  +                  Be aware that this will be written to the nix store
  +                  in plaintext! Use an environment variable instead.
  +                </para></warning>
  +
  +                <note><para>
  +                  Mutually exclusive with <varname>pskRaw</varname>.
  +                </para></note>
                 '';
               };
   
  
positive.code:               example = ''
                  eap=PEAP
                  identity="user@example.com"
                  password="secret"
                '';
                description = ''
                  Use this option to configure advanced authentication methods like EAP.
  
negative.code:     let
        deviceUnit = optional (iface != null) "sys-subsystem-net-devices-${utils.escapeSystemdPath iface}.device";
        configStr = if cfg.allowAuxiliaryImperativeNetworks
          then "-c /etc/wpa_supplicant.conf -I ${finalConfig}"
          else "-c ${finalConfig}";
      in {
        description = "WPA Supplicant instance" + optionalString (iface != null) " for interface ${iface}";
  
  