anchor.diff:      }
   
       open_yubikey() {
  -
           # Make all of these local to this function
           # to prevent their values being leaked
           local salt
  
positive.code: 
          if [ "$opened" == false ]; then
              umount ${yubikey.storage.mountPoint}
              echo "Maximum authentication errors reached"
              exit 1
          fi
  
          echo -n "Gathering entropy for new salt (please enter random keys to generate entropy if this blocks for long)..."
  
negative.code:         umount ${yubikey.storage.mountPoint}
      }
  
      if wait_yubikey ${toString yubikey.gracePeriod}; then
          open_yubikey
      else
          echo "no yubikey found, falling back to non-yubikey open procedure"
          open_normally
      fi
      ''}
  
  