anchor.diff:  
   # enable or disable client/server encryption.
   client_encryption_options:
  -    enabled: false
  -    keystore: conf/.keystore
  -    keystore_password: cassandra
  +    enabled: <%= @client_encryption_enabled %>
  +    keystore: <%= @client_encryption_keystore %>
  +    keystore_password: <%= @client_encryption_keystore_password %>
       # require_client_auth: false
       # Set trustore and truststore_password if require_client_auth is true
       # truststore: conf/.truststore
  
positive.code: # - PasswordAuthenticator relies on username/password pairs to authenticate
  #   users. It keeps usernames and hashed passwords in system_auth.credentials table.
  #   Please increase system_auth keyspace replication factor if you use this authenticator.
  authenticator: AllowAllAuthenticator
  
  # Authorization backend, implementing IAuthorizer; used to limit access/provide permissions
  # Out of the box, Cassandra provides org.apache.cassandra.auth.{AllowAllAuthorizer,
  
negative.code: # http://download.oracle.com/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html#CreateKeystore
  #
  server_encryption_options:
      internode_encryption: <%= @server_encryption_internode %>
      keystore: <%= @server_encryption_keystore %>
      keystore_password: <%= @server_encryption_keystore_password %>
      truststore: <%= @server_encryption_truststore %>
      truststore_password: <%= @server_encryption_truststore_password %>
      # More advanced defaults below:
      # protocol: TLS
      # algorithm: SunX509
  