anchor.diff:              refresh-token-validity: 86400 # re-login required once a day
               secret: "" # CLI expects this secret to be empty
   
  -        admin: {client_secret: admin-password}
  -        login: {client_secret: login-password}
  +        admin:
  +          # client_secret: admin-password # <--- Uncomment & change
  +        login:
  +          # client_secret: login-password # <--- Uncomment & change
           zones: {internal: {hostnames: []}}
       ```
   
  
positive.code:       sha1: a96833b6c68abda5aaa5d05ebdd0a5d394e6c15f
      # ...
      - name: uaa # <---
        url: https://bosh.io/d/github.com/cloudfoundry/uaa-release?v=1
        sha1: 477289da17ffe105d0b6bde1bc10f61b1cb50fb4
      ```
  
  1. Colocate UAA next to the Director:
  
negative.code: 
          scim:
            users:
            - name: admin
              # password: admin-password # <--- Uncomment & change
              groups:
              - scim.write
              - scim.read
              - bosh.admin
  
          clients:
            bosh_cli:
  