anchor.diff:  
   # enable or disable client/server encryption.
   client_encryption_options:
  -    enabled: false
  -    keystore: conf/.keystore
  -    keystore_password: cassandra
  +    enabled: <%= @client_encryption_enabled %>
  +    keystore: <%= @client_encryption_keystore %>
  +    keystore_password: <%= @client_encryption_keystore_password %>
       # require_client_auth: false
       # Set trustore and truststore_password if require_client_auth is true
       # truststore: conf/.truststore
  
positive.code: #              remaining available sstables.  This means you WILL see obsolete
  #              data at CL.ONE!
  # ignore: ignore fatal errors and let requests fail, as in pre-1.2 Cassandra
  disk_failure_policy: stop
  
  # policy for commit disk failures:
  # die: shut down gossip and Thrift and kill the JVM, so the node can be replaced.
  
negative.code: 
  # TCP port, for commands and data
  # For security reasons, you should not expose this port to the internet.  Firewall it if needed.
  storage_port: <%= @storage_port %>
  
  # SSL port, for encrypted communication.  Unused unless enabled in
  # encryption_options
  