anchor.diff:      : WINDOWS (WITH optionsLists)? | CERTIFICATE ID | ASYMMETRIC KEY ID
       ;
   
  -setOption
  +alterLogin
  +    : ALTER LOGIN ID (ENABLE | DISABLE | WITH loginOption (COMMA loginOption)* | credentialOption)
  +    ;
  +
  +loginOption
       :  PASSWORD EQ_ STRING HASHED? (OLD_PASSWORD EQ_ STRING | passwordOption (passwordOption )?)?
       | DEFAULT_DATABASE EQ_ databaseName
       | optionsList
  
positive.code:     : MUST_CHANGE | UNLOCK
      ;
  
  credentialsOption
      : ADD CREDENTIAL Id
      | DROP CREDENTIAL
      ;
  
negative.code:     ;
  
  createLogin
      : CREATE LOGIN (windowsPrincipal | ID) (WITH  loginOptionList  | FROM  sources)
      ;
  
  loginOptionList
  