anchor.diff:            REPLACE-WITH-SERVER-CERT
             -----END CERTIFICATE-----
           server_key: |
  -          -----BEGIN RSA PRIVATE KEY-----
  +          -----BEGIN EXAMPLE RSA PRIVATE KEY-----
             REPLACE-WITH-SERVER-KEY
  -          -----END RSA PRIVATE KEY-----
  +          -----END EXAMPLE RSA PRIVATE KEY-----
     garden_properties:
       network_plugin: /var/vcap/packages/runc-cni/bin/garden-external-networker
       network_plugin_extra_args:
  
positive.code:         REPLACE-WITH-CLIENT-CERTIFICATE
          -----END CERTIFICATE-----
        client_key: |
          -----BEGIN RSA PRIVATE KEY-----
          REPLACE-WITH-CLIENT-KEY
          -----END RSA PRIVATE KEY-----</code></pre></td>
      <td>Copy in certificates and keys for the policy agent.
          The policy agent communicates with the policy server through TLS.
          See the <a href="../../concepts/understand-cf-networking.html#architecture">Architecture</a> section for more information.
  
negative.code:           REPLACE-WITH-CLIENT-CERTIFICATE
            -----END CERTIFICATE-----
          client_key: |
            -----BEGIN EXAMPLE RSA PRIVATE KEY-----
            REPLACE-WITH-CLIENT-KEY
            -----END EXAMPLE RSA PRIVATE KEY-----
        garden_external_networker:
          cni_plugin_dir: /var/vcap/packages/flannel/bin
          cni_config_dir: /var/vcap/jobs/cni-flannel/config/cni
  