anchor.diff:  
   === HTPasswd
   
  -Set `*HTPasswdPasswordIdentityProvider*` in the `*identityProviders*` stanza to
  +Set *HTPasswdPasswordIdentityProvider* in the `*identityProviders*` stanza to
   validate user names and passwords against a flat file generated using
   http://httpd.apache.org/docs/2.4/programs/htpasswd.html[`htpasswd`].
   
  
positive.code: ----
  <1> This provider name is prefixed to the returned user ID to form an identity
  name.
  <2> When `true`, unauthenticated token requests from non-web clients (like the
  CLI) are sent a `WWW-Authenticate` challenge header for this provider.
  <3> When `true`, unauthenticated token requests from web clients (like the web
  console) are redirected to a login page backed by this provider.
  <4> URL accepting credentials in Basic authentication headers.
  <5> Optional: Certificate bundle to use to validate server certificates for the
  
negative.code:   encryption: "..."
  ...
  ----
  <1> List of secrets used to authenticate and encrypt cookie sessions. At least
  one secret must be specified. Each secret must set an authentication and
  encryption secret.
  <2> Signing secret, used to authenticate sessions using HMAC. Recommended to use
  a secret with 32 or 64 bytes.
  <3> Encrypting secret, used to encrypt sessions. Must be 16, 24, or 32
  characters long, to select AES-128, AES-192, or AES-256.
  ====
  