anchor.diff:  --------------------------------------------------
   <1> `smtp.host` varies depending on the region
   
  -In order to store the account SMTP password, use the keystore command
  +To store the account SMTP password, use the keystore command
   (see {ref}/secure-settings.html[secure settings])
   
   [source,yaml]
  
positive.code: allowed by <<email-html-sanitization, Configuring HTML Sanitization Options>>.
  
  You configure the accounts {watcher} can use to send email in the
  `xpack.notification.email` namespace in `elasticsearch.yml`.
  
  If your email account is configured to require two step verification, you need
  to generate and use a unique App Password to send email from {watcher}.
  Authentication will fail if you use your primary password.
  
  IMPORTANT: Currently, neither Watcher nor Shield provide a mechanism to encrypt
  settings in `elasticsearch.yml`. Because the email account credentials appear
  in plain text, you should limit access to `elasticsearch.yml` to the user that
  you use to run Elasticsearch.
  
  [[email-profile]]
  {watcher} provides three email profiles that control how MIME messages are
  
negative.code:             user: <username>
  --------------------------------------------------
  
  To store the account SMTP password, use the keystore command
  (see {ref}/secure-settings.html[secure settings])
  
  [source,yaml]
  