anchor.diff:  # Lifetime and size of ephemeral version 1 server key
   # Unless specified, setting ServerKeyBits to newer default of 1024
   <% if @options['KeyRegenerationInterval'] -%>
  -KeyRegenerationInterval <%= options['KeyRegenerationInterval'] %>
  +KeyRegenerationInterval <%= @options['KeyRegenerationInterval'] %>
   <% else -%>
   #KeyRegenerationInterval 1h
   <% end -%>
  -ServerKeyBits <%= options['ServerKeyBits'] || '1024' %>
  +ServerKeyBits <%= @options['ServerKeyBits'] || '1024' %>
   
   # Ciphers and keying
   #RekeyLimit default none
  
positive.code: # Logging
  # obsoletes QuietMode and FascistLogging
  <% if @options['SyslogFacility'] -%>
  SyslogFacility <%= options['SyslogFacility'] %>
  <% elsif @osfamily == 'RedHat' -%>
  SyslogFacility <%= options['SyslogFacility'] || 'AUTHPRIV' %>
  <% else -%>
  #SyslogFacility AUTH
  <% end -%>
  <% if @options['LogLevel'] -%>
  LogLevel <%= options['LogLevel'] %>
  <% else -%>
  #LogLevel INFO
  <% end -%>
  
negative.code: <% end -%>
  
  <% if @options['AcceptEnv'] -%>
  <% if @options['AcceptEnv'].respond_to?('each') -%>
  <% @options['AcceptEnv'].each do |env| -%>
  AcceptEnv <%= env %>
  <% end -%>
  <% else -%>
  AcceptEnv <%= @options['AcceptEnv'] %>
  <% end -%>
  <% else -%>
  <% if @osfamily == 'Debian' -%>
  