anchor.diff:  # Authentication:
   
   <% if @options['LoginGraceTime'] -%>
  -LoginGraceTime <%= options['LoginGraceTime'] %>
  +LoginGraceTime <%= @options['LoginGraceTime'] %>
   <% else -%>
   #LoginGraceTime 2m
   <% end -%>
   PermitRootLogin <%= permit_root_login %>
   <% if @options['StrictModes'] -%>
  -StrictModes <%= options['StrictModes'] %>
  +StrictModes <%= @options['StrictModes'] %>
   <% else -%>
   #StrictModes yes
   <% end -%>
   <% if @options['MaxAuthTries'] -%>
  -MaxAuthTries <%= options['MaxAuthTries'] %>
  +MaxAuthTries <%= @options['MaxAuthTries'] %>
   <% else -%>
   #MaxAuthTries 6
   <% end -%>
   <% if @options['MaxSessions'] -%>
  -MaxSessions <%= options['MaxSessions'] %>
  +MaxSessions <%= @options['MaxSessions'] %>
   <% else -%>
   #MaxSessions 10
   <% end -%>
   
   <% if @options['RSAAuthentication'] -%>
  -RSAAuthentication <%= options['RSAAuthentication'] %>
  +RSAAuthentication <%= @options['RSAAuthentication'] %>
   <% else -%>
   #RSAAuthentication yes
   <% end -%>
   <% if @options['PubkeyAuthentication'] -%>
  -PubkeyAuthentication <%= options['PubkeyAuthentication'] %>
  +PubkeyAuthentication <%= @options['PubkeyAuthentication'] %>
   <% else -%>
   #PubkeyAuthentication yes
   <% end -%>
   
   <% if @options['AuthorizedKeysFile'] -%>
  -AuthorizedKeysFile <%= options['AuthorizedKeysFile'] %>
  +AuthorizedKeysFile <%= @options['AuthorizedKeysFile'] %>
   <% else -%>
   # The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
   # but this is overridden so installations will only check .ssh/authorized_keys
  
positive.code: 
  
  <% if @options['AllowAgentForwarding'] -%>
  AllowAgentForwarding <%= options['AllowAgentForwarding'] %>
  <% else -%>
  #AllowAgentForwarding yes
  <% end -%>
  <% if @options['AllowTcpForwarding'] -%>
  AllowTcpForwarding <%= options['AllowTcpForwarding'] %>
  <% else -%>
  #AllowTcpForwarding yes
  <% end -%>
  <% if @options['GatewayPorts'] -%>
  GatewayPorts <%= options['GatewayPorts'] %>
  <% else -%>
  #GatewayPorts no
  <% end -%>
  <% if @options['X11Forwarding'] -%>
  X11Forwarding <%= options['X11Forwarding'] %>
  <% elsif @osfamily == 'Debian' || @osfamily == 'RedHat' -%>
  # Debian and RedHat set X11Forwarding to yes.
  X11Forwarding yes
  
negative.code: # Logging
  # obsoletes QuietMode and FascistLogging
  <% if @options['SyslogFacility'] -%>
  SyslogFacility <%= @options['SyslogFacility'] %>
  <% elsif @osfamily == 'RedHat' -%>
  SyslogFacility <%= @options['SyslogFacility'] || 'AUTHPRIV' %>
  <% else -%>
  #SyslogFacility AUTH
  <% end -%>
  <% if @options['LogLevel'] -%>
  LogLevel <%= @options['LogLevel'] %>
  <% else -%>
  #LogLevel INFO
  <% end -%>
  