anchor.diff:  ;;; either through the old tokens, or with the new tokens.
   (defun regenerate-token (user)
     (let ((new-token (read-token #p"/dev/urandom"))
  -        (device (find-hermes-device)))
  +        (device (find-hermes-device))
  +        (user-file (merge-pathnames user *user-tokens-path*)))
       (when device
         (write-device-token device new-token)
         ;; @TODO
  
positive.code: (defun is-block-device (path)
    (sb-posix:s-isblk (sb-posix:stat-mode (sb-posix:stat path))))
  
  (defun has-hermes-fingerprint (path)
    (with-open-file (f path
                       :direction :input
                       :element-type '(unsigned-byte 8))
      (let ((bytes (make-array *fingerprint-length* :element-type '(unsigned-byte 8))))
        (read-sequence bytes f)
        (every #'= bytes *fingerprint*))))
  
  ;;; Safe One-Time Tokens
  ;;;
  
negative.code: (defvar *user-tokens-path* #p"/etc/hermes/")
  (defvar *storage-device-prefix* "sd")
  (defvar *devices-folder* #p"/dev/")
  
  (defvar *safe-ott-device-offset* 133)
  (defvar *safe-ott-user-offset* 128)
  
  (defmacro loop-with-unix-socket (vars &body body)
    (let ((socket (first vars))
  