anchor.diff:  
         F2FS_FS             = module;
         F2FS_FS_SECURITY    = option yes;
  -      F2FS_FS_ENCRYPTION  = option yes;
  +      F2FS_FS_ENCRYPTION  = whenOlder "5.1" yes;
         F2FS_FS_COMPRESSION = whenAtLeast "5.6" yes;
         UDF_FS              = module;
   
  
positive.code: 
        EXT4_FS_POSIX_ACL = yes;
        EXT4_FS_SECURITY  = yes;
        EXT4_ENCRYPTION   = option yes;
  
        NTFS_FS            = whenAtLeast "5.15" no;
        NTFS3_LZX_XPRESS   = whenAtLeast "5.15" yes;
  
negative.code:       MODULE_SIG            = no; # r13y, generates a random key during build and bakes it in
        # Depends on MODULE_SIG and only really helps when you sign your modules
        # and enforce signatures which we don't do by default.
        SECURITY_LOCKDOWN_LSM = whenAtLeast "5.4" no;
  
        # provides a register of persistent per-UID keyrings, useful for encrypting storage pools in stratis
        PERSISTENT_KEYRINGS              = yes;
  