anchor.diff:    cf:
       scope: cloud_controller.read,&nbsp;[...]&nbsp;routing.router_groups.read,<strong>network.admin</strong></pre>
           <li><a name="uaa-secret"></a>Under <code>clients</code>, add a <code>network-policy</code> 
  -        client as follows and replace <code>REPLACE_WITH_UAA_CLIENT_SECRET</code> with a secure password of your choosing. 
  +        client as follows and replace <code>REPLACE-WITH-UAA-CLIENT-SECRET</code> with a secure password of your choosing. 
           <pre>
   clients:
     cf:
  
positive.code:     <td><pre><code>
    ca_cert: |
      -----BEGIN CERTIFICATE-----
      REPLACE_WITH_CA_CERT
      -----END CERTIFICATE-----
    server_cert: |
      -----BEGIN CERTIFICATE-----
      REPLACE_WITH_SERVER_CERT
      -----END CERTIFICATE-----
    server_key: |
      -----BEGIN RSA PRIVATE KEY-----
      REPLACE_WITH_SERVER_KEY
      -----END RSA PRIVATE KEY-----
  garden_external_networker:
    cni_plugin_dir: /var/vcap/packages/flannel/bin
    cni_config_dir: /var/vcap/jobs/cni-flannel/config/cni
      </code></pre></td>
      <td>
      Paste in the certificates and keys for the policy server. 
      The policy server communicates with the policy agent through TLS. 
      See the <a href="#architecture">Architecture</a> section for more information.
      </td>
  
negative.code:       policy_server_url: [...]
        ca_cert: |
          -----BEGIN CERTIFICATE-----
          REPLACE-WITH-CA-CERTIFICATE
          -----END CERTIFICATE-----
        client_cert: |
          -----BEGIN CERTIFICATE-----
          REPLACE-WITH-CLIENT-CERTIFICATE
          -----END CERTIFICATE-----
        client_key: |
          -----BEGIN RSA PRIVATE KEY-----
          REPLACE-WITH-CLIENT-KEY
          -----END RSA PRIVATE KEY-----</code></pre></td>
      <td>Copy in certificates and keys for the policy agent. 
          The policy agent communicates with the policy server through TLS. 
          See the <a href="#architecture">Architecture</a> section for more information.
      </td>
  