anchor.diff:        path = [ pkgs.iproute pkgs.utillinux pkgs.coreutils ];
       };
   
  -    # Turn off NixOS' network management
  -    networking = {
  +    # Turn off NixOS' network management when networking is managed entirely by NetworkManager
  +    networking = (mkIf (!delegateWireless) {
         useDHCP = false;
  -      # use mkDefault to trigger the assertion about the conflict above
  +      # Use mkDefault to trigger the assertion about the conflict above
         wireless.enable = mkDefault false;
  -    };
  +    }) // (mkIf cfg.enableStrongSwan {
  +      networkmanager.packages = [ pkgs.networkmanager_strongswan ];
  +    });
   
       security.polkit.extraConfig = polkitConf;
  -
  -    networking.networkmanager.packages =
  -      mkIf cfg.enableStrongSwan [ pkgs.networkmanager_strongswan ];
   
       services.dbus.packages =
         optional cfg.enableStrongSwan pkgs.strongswanNM ++ cfg.packages;
  
positive.code:       basePackages = mkOption {
          type = types.attrsOf types.package;
          default = { inherit (pkgs)
                              networkmanager modemmanager wpa_supplicant crda
                              networkmanager-openvpn networkmanager-vpnc
                              networkmanager-openconnect networkmanager-fortisslvpn
                              networkmanager-l2tp networkmanager-iodine; };
          internal = true;
        };
  
  
negative.code: 
    dynamicHostsEnabled =
      cfg.dynamicHosts.enable && cfg.dynamicHosts.hostsDirs != {};
  
    delegateWireless = config.networking.wireless.enable == true && cfg.unmanaged != [];
  
    # /var/lib/misc is for dnsmasq.leases.
    stateDirs = "/var/lib/NetworkManager /var/lib/dhclient /var/lib/misc";
  