anchor.diff:  
   # Install Chef encrypted data bag secret
   ( cat <<'EOP'
  -<%= IO.read(Chef::Config[:encrypted_data_bag_secret]) %>
  +<%= IO.read(Chef::Config[:knife][:encrypted_data_bag_secret]) %>
   EOP
   ) > /tmp/encrypted_data_bag_secret
   awk NF /tmp/encrypted_data_bag_secret > /etc/chef/encrypted_data_bag_secret
  
positive.code: # Update package repositories
  apt-get update
  
  
negative.code: # Install Chef server ssl cert
  mkdir /etc/chef/trusted_certs
  ( cat <<'EOP'
  <%= IO.read(Chef::Config[:knife][:chef_server_ssl_cert]) %>
  EOP
  ) > /tmp/server.crt
  awk NF /tmp/server.crt > /etc/chef/trusted_certs/server.crt
  