anchor.diff:        server.key = ${cfg.pki.server.key}
         server.crl = ${cfg.pki.server.crl}
       ''}
  -  '';
  +  '' + cfg.extraConfig);
   
     orgOptions = { name, ... }: {
       options.users = mkOption {
  
positive.code: 
        pki.manual = manualPkiOptions;
        pki.auto = autoPkiOptions;
      };
    };
  
  
negative.code:     in flatten (mapAttrsToList mkSublist attrs);
    in all isNull (findPkiDefinitions [] manualPkiOptions);
  
    configFile = pkgs.writeText "taskdrc" (''
      # systemd related
      daemon = false
      log = -
  