anchor.diff:  
   Plug your drive into your computer and open Disk Utility.  Select the disk (not the volume) on the left and navigate to the "Erase" tab.  You'll want to name the volume something simple (such as "keys") to make it easier to access on the command line.
   
  -Depending on the format of your USB key's partition table, then the partition table is MBR, which doesn't support encryption, and you won't see encrypted partitions as options in the "Format" dropdown.  In that case, you'll have to do a two-step dance, formatting the drive twice:
  +If you see the encrypted options in the dropdown, then just go ahead and format your drive with `Mac OS Extended (Case-sensitive, Journaled, Encrypted)`
  +
  +However, some USB keys' partition tables are MBR, which doesn't support encryption, and you won't see encrypted partitions as options in the "Format" dropdown.  In that case, you'll have to do a two-step dance, formatting the drive twice:
   
   1. Once as `OS X Extended (Journaled)` using the `GUID Partition Map`, then..
   1. Again, using `Mac OS Extended (Case-sensitive, Journaled, Encrypted)`.
  -
  -If you see the encrypted options in the dropdown, then just jump straight to #2 above.
   
   Now, you'll be prompted for your decryption password whenever you insert the drive.  Be sure not to save the password into the OS X Keychain.
   
  
positive.code: |                 |
  +-----------------+
  ```
  
  ### Script to Load Keys and Eject
  
  
negative.code: ### Choosing a USB Key
  {: .clear }
  
  We prefer the [Kingston DataTraveler](http://www.amazon.com/Kingston-Digital-DataTraveler-DTSE9H-16GBZET/dp/B00DYQYITG) drive due to its size and cost.  Once you've found a USB keychain drive to your liking, you'll want to reformat it using macOS's built-in encrypted filesystem.
  
  ### Format the Drive
  
  