anchor.diff:  |==========================================================================================
   | Name                        | Default   | Description
   | `server`                    |           | Server provisioning URL. If empty, set to `tls.server`.
  -| `primary_ecu_hardware_id`   |           | The hardware ID of the primary ECU (e.g., `"raspberry-pi"`). If left empty, the hostname of the device will be used.
  -| `provision_path`            |           | Path to an archive containing provisioning data. See link:{aktualizr-github-url}/docs/credentials.adoc[] for the specification of the contents of this file.
   | `p12_password`              |           | Password for PKCS#12 encryption.
   | `expiry_days`               | `"36000"` | Provided in the `ttl` field of the device provisioning request sent to the server.
  +| `provision_path`            |           | Path to an archive containing provisioning data. See link:{aktualizr-github-url}/docs/credentials.adoc[] for the specification of the contents of this file.
   | `device_id`                 |           | Device ID of the primary ECU. If left empty, a random name will be generated.
   | `primary_ecu_serial`        |           | Serial number of the primary ECU. If left empty, a random serial will be generated.
  +| `primary_ecu_hardware_id`   |           | The hardware ID of the primary ECU (e.g., `"raspberry-pi"`). If left empty, the hostname of the device will be used.
   | `ecu_registration_endpoint` |           | Ecu provisioning URL. If empty, set to `uptane.director_server` with `/ecus` appended.
   |==========================================================================================
   
  
positive.code: | Name                      | Default                   | Description
  | `type`                    | `"sqlite"`                | What type of storage driver to use. Options: `"sqlite"`. The former `"filesystem"` option is now disabled, existing devices will be migrated (see note below)
  | `path`                    | `"/var/sota"`             | Directory for storage
  | `uptane_metadata_path`    | `"metadata"`              | Path to the uptane metadata store, for migration from `filesystem`.
  | `uptane_private_key_path` | `"ecukey.der"`            | Relative path to the Uptane specific private key, for migration from `filesystem`.
  | `uptane_public_key_path`  | `"ecukey.pub"`            | Relative path to the Uptane specific public key, for migration from `filesystem`.
  | `tls_cacert_path`         | `"root.crt"`              | Relative path to the TLS root CA certificate, for migration from `filesystem`.
  | `tls_pkey_path`           | `"pkey.pem"`              | Relative path to the client's TLS private key, for migration from `filesystem`.
  | `tls_clientcert_path`     | `"client.pem"`            | Relative path to the client's TLS certificate, for migration from `filesystem`.
  | `sqldb_path`              | `"sql.db"`                | Relative path to the database file.
  |==========================================================================================
  
  The only supported storage option is now `sqlite`.
  
negative.code: 
  [options="header"]
  |==========================================================================================
  | Name                      | Default                  | Description
  | `base_path`               | `"/var/sota/import"`     | Path to a common root directory to the subsequent files
  | `uptane_private_key_path` |                          | Path to the device's private key.
  | `uptane_public_key_path`  |                          | Path to the device's public key.
  | `tls_cacert_path`         |                          | Path to the TLS root CA certificate.
  | `tls_pkey_path`           |                          | Path to the TLS private key.
  | `tls_clientcert_path`     |                          | Path to the TLS client certificate.
  |==========================================================================================
  
  == `telemetry`
  