anchor.diff:    <tr>
       <td><pre><code>
   policy_server:
  -  uaa_client_secret: REPLACE_WITH_UAA_CLIENT_SECRET
  +  uaa_client_secret: REPLACE-WITH-UAA-CLIENT-SECRET
       </code></pre></td>
  -    <td>Paste in the same value you used in the step <a href="#uaa-secret">above</a>.
  +    <td>Copy in the same value you used in the step <a href="#uaa-secret">above</a>.
       </td>
     </tr>
     <tr>
       <td><pre><code>
   database:
  -  type: REPLACE_WITH_DB_TYPE 
  -  username: REPLACE_WITH_USERNAME
  -  password: REPLACE_WITH_PASSWORD
  -  host: REPLACE_WITH_DB_HOSTNAME
  -  port: REPLACE_WITH_DB_PORT 
  -  name: REPLACE_WITH_DB_NAME 
  +  type: REPLACE-WITH-DB-TYPE 
  +  username: REPLACE-WITH-USERNAME
  +  password: REPLACE-WITH-PASSWORD
  +  host: REPLACE-WITH-DB-HOSTNAME
  +  port: REPLACE-WITH-DB-PORT 
  +  name: REPLACE-WITH-DB-NAME 
      </code></pre></td>
       <td>
       Supply the details for the database from <a href="#enable">step 1</a>.<br>
  
positive.code:   cf:
      scope: cloud_controller.read,&nbsp;[...]&nbsp;routing.router_groups.read,<strong>network.admin</strong></pre>
          <li><a name="uaa-secret"></a>Under <code>clients</code>, add a <code>network-policy</code> 
          client as follows and replace <code>REPLACE_WITH_UAA_CLIENT_SECRET</code> with a secure password of your choosing. 
          <pre>
  clients:
    cf:
  
negative.code:         policy_server_url: https://policy-server.service.cf.internal:4003
          ca_cert: |
            -----BEGIN CERTIFICATE-----
            REPLACE-WITH-CA-CERTIFICATE
            -----END CERTIFICATE-----
          client_cert: |
            -----BEGIN CERTIFICATE-----
            REPLACE-WITH-CLIENT-CERTIFICATE
            -----END CERTIFICATE-----
          client_key: |
            -----BEGIN RSA PRIVATE KEY-----
            REPLACE-WITH-CLIENT-KEY
            -----END RSA PRIVATE KEY-----
        garden_external_networker:
          cni_plugin_dir: /var/vcap/packages/flannel/bin
  