anchor.diff:  SIGNING_KEY=/var/vcap/packages/generated_signing_key/id_rsa
   PIDFILE=$RUN_DIR/atc.pid
   CF_CA_CERT=/var/vcap/jobs/atc/config/cf_ca_cert
  +POSTGRESQL_CA_CERT=/var/vcap/jobs/atc/config/postgres_ca_cert
  +POSTGRESQL_CLIENT_CERT=/var/vcap/jobs/atc/config/postgres_client_cert
  +POSTGRESQL_CLIENT_KEY=/var/vcap/jobs/atc/config/postgres_client_key
   
   source /var/vcap/packages/pid_utils/pid_utils.sh
   
  
positive.code: 
      chown vcap:vcap $CF_CA_CERT
      chmod 0400 $CF_CA_CERT
  
      setcap cap_net_bind_service=+ep /var/vcap/packages/atc/bin/atc
  
  
negative.code:       --postgres-user <%= esc(postgres_role_name) %> \
        --postgres-password <%= esc(postgres_role_password) %> \
        <% if_p("postgresql.ca_cert") do |_| %> \
        --postgres-ca-cert $POSTGRESQL_CA_CERT \
        <% end %> \
        <% if_p("postgresql.client_cert", "postgresql.client_key") do |*_| %> \
        --postgres-client-cert $POSTGRESQL_CLIENT_CERT \
        --postgres-client-key $POSTGRESQL_CLIENT_KEY \
        <% end %> \
        --postgres-connect-timeout <%= p("postgresql.connect_timeout") %> \
        <% if_p("encryption_key") do |key| %> \
  