anchor.diff:  
       # TODO Maybe we should support multiple wrappers with different groups,
       # but for now it is enough if it works in nix builds
  -    security.wrappers.nix-nspawn-run = {
  -      source = "${cfg.package}/bin/nix-nspawn-run";
  +    security.wrappers.nixos-multi-spawn = {
  +      source = "${cfg.package}/bin/nixos-multi-spawn";
         owner = "root";
         group = "nixbld";
         permissions = "u+rsx,g+x";
  
positive.code: 
  let
  
    cfg = config.programs.nix-nspawn-run;
  
  in {
    options = {
  
      programs.nix-nspawn-run = {
        package = mkOption {
          type = types.package;
          default = import (pkgs.fetchFromGitHub {
            owner = "evidentiae";
            repo = "nix-nspawn-run";
            rev = "d26529aaf22946743976203ae5a47a5a1b9fc4fc";
            sha256 ="1s0i0nmczimy0yxgngz33gjjx2c1b51iksmldzdhh2ii98gswika";
          }) { inherit pkgs; };
        };
      };
  
negative.code: # WARNING! This sets up nixos-multi-spawn as a suid program. Theoretically
  # it should be fine, since nixos-multi-spawn only runs unprivileged containers,
  # and gives no possibility to configure the systemd-nspawn options.
  
  { config, lib, pkgs, ... }:
  