anchor.diff:                   (list "setfacl" "-m" (format nil "u:~a:rwx" uid) home))
                  home)
                home))
  -     (directory (if (and home cd-home (not directory)) home directory))
  +     (inner-home (when home (or inner-home home)))
  +     (directory (if (and inner-home cd-home (not directory)) inner-home directory))
        (tmp (if (eq tmp t)
               (let* ((containing-directory
                        (format nil "/tmp/subuser-tmps-~a/"
  
positive.code:                  ,@(when grab-sound `(("-B" "/dev/snd")))
                   ,@(when (or mount-sys grab-dri) `(("-B" "/sys")))
                   ,@(when tmp `(("-B" ,tmp "/tmp")))
                   ,@(when home `(("-B" ,home)))
                   ,@ mounts))
                 ,@(when verbose-nsjail `("verbose"))
                 ,@(when keep-namespaces
  
negative.code:                     ("SOCKS_PORT"    ,(format nil "~a" socks-proxy))
                      ("SOCKS_VERSION" "5")
                      ))
                ,@(when inner-home `(("HOME" ,inner-home)))
                ("PATH" ,path)
                ("LANG" ,(or locale (uiop:getenv "LANG") "en_US.UTF-8"))
                ("LOCALE_ARCHIVE"
  