---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
   FunctionArgument {
    identifier: "config",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (3, 6),
  },
  target: LetIn {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfg",
        position: (6, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (6, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "security",
         position: (6, 16),
        },
        Raw {
         content: "pam",
         position: (6, 25),
        },
        Raw {
         content: "mount",
         position: (6, 29),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "oflRequired",
        position: (8, 3),
       },
      ],
     },
     BinaryOperation {
      operator: LogicalOr,
      operands: [
       BinaryOperation {
        operator: LogicalOr,
        operands: [
         PropertyAccess {
          expression: Variable {
           identifier: "cfg",
           position: (8, 17),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "logoutHup",
             position: (8, 21),
            },
           ],
          },
          default: None,
         },
         PropertyAccess {
          expression: Variable {
           identifier: "cfg",
           position: (8, 34),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "logoutTerm",
             position: (8, 38),
            },
           ],
          },
          default: None,
         },
        ],
        position: (8, 31),
       },
       PropertyAccess {
        expression: Variable {
         identifier: "cfg",
         position: (8, 52),
        },
        attribute_path: AttributePath {
         attributes: [
          Raw {
           content: "logoutKill",
           position: (8, 56),
          },
         ],
        },
        default: None,
       },
      ],
      position: (8, 49),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "fake_ofl",
        position: (10, 3),
       },
      ],
     },
     FunctionApplication {
      function: PropertyAccess {
       expression: Variable {
        identifier: "pkgs",
        position: (10, 14),
       },
       attribute_path: AttributePath {
        attributes: [
         Raw {
          content: "writeShellScriptBin",
          position: (10, 19),
         },
        ],
       },
       default: None,
      },
      arguments: [
       String {
        parts: [
         Raw {
          content: "fake_ofl",
         },
        ],
        position: (10, 39),
       },
       String {
        parts: [
         Raw {
          content: "SIGNAL=$1\nMNTPT=$2\n",
         },
         Expression {
          expression: PropertyAccess {
           expression: Variable {
            identifier: "pkgs",
            position: (13, 7),
           },
           attribute_path: AttributePath {
            attributes: [
             Raw {
              content: "lsof",
              position: (13, 12),
             },
            ],
           },
           default: None,
          },
         },
         Raw {
          content: "/bin/lsof | ",
         },
         Expression {
          expression: PropertyAccess {
           expression: Variable {
            identifier: "pkgs",
            position: (13, 31),
           },
           attribute_path: AttributePath {
            attributes: [
             Raw {
              content: "gnugrep",
              position: (13, 36),
             },
            ],
           },
           default: None,
          },
         },
         Raw {
          content: "/bin/grep $MNTPT | ",
         },
         Expression {
          expression: PropertyAccess {
           expression: Variable {
            identifier: "pkgs",
            position: (13, 65),
           },
           attribute_path: AttributePath {
            attributes: [
             Raw {
              content: "gawk",
              position: (13, 70),
             },
            ],
           },
           default: None,
          },
         },
         Raw {
          content: "/bin/awk '{print $2}' | ",
         },
         Expression {
          expression: PropertyAccess {
           expression: Variable {
            identifier: "pkgs",
            position: (13, 101),
           },
           attribute_path: AttributePath {
            attributes: [
             Raw {
              content: "findutils",
              position: (13, 106),
             },
            ],
           },
           default: None,
          },
         },
         Raw {
          content: "/bin/xargs ",
         },
         Expression {
          expression: PropertyAccess {
           expression: Variable {
            identifier: "pkgs",
            position: (13, 129),
           },
           attribute_path: AttributePath {
            attributes: [
             Raw {
              content: "util-linux",
              position: (13, 134),
             },
            ],
           },
           default: None,
          },
         },
         Raw {
          content: "/bin/kill -$SIGNAL\n",
         },
        ],
        position: (10, 50),
       },
      ],
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "anyPamMount",
        position: (16, 3),
       },
      ],
     },
     FunctionApplication {
      function: Variable {
       identifier: "any",
       position: (16, 17),
      },
      arguments: [
       FunctionApplication {
        function: Variable {
         identifier: "attrByPath",
         position: (16, 22),
        },
        arguments: [
         List {
          elements: [
           String {
            parts: [
             Raw {
              content: "pamMount",
             },
            ],
            position: (16, 34),
           },
          ],
          position: (16, 33),
         },
         Variable {
          identifier: "false",
          position: (16, 46),
         },
        ],
       },
       FunctionApplication {
        function: Variable {
         identifier: "attrValues",
         position: (16, 54),
        },
        arguments: [
         PropertyAccess {
          expression: Variable {
           identifier: "config",
           position: (16, 65),
          },
          attribute_path: AttributePath {
           attributes: [
            Raw {
             content: "security",
             position: (16, 72),
            },
            Raw {
             content: "pam",
             position: (16, 81),
            },
            Raw {
             content: "services",
             position: (16, 85),
            },
           ],
          },
          default: None,
         },
        ],
       },
      ],
     },
    ),
   ],
   target: Map {
    bindings: [
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "options",
         position: (20, 3),
        },
       ],
      },
      Map {
       bindings: [
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "security",
            position: (22, 5),
           },
           Raw {
            content: "pam",
            position: (22, 14),
           },
           Raw {
            content: "mount",
            position: (22, 18),
           },
          ],
         },
         Map {
          bindings: [
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "enable",
               position: (23, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (23, 16),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (24, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (24, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (24, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (25, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (25, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (26, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Enable PAM mount system to mount fileystems on user login.\n",
                   },
                  ],
                  position: (26, 23),
                 },
                ),
               ],
               recursive: false,
               position: (23, 25),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "extraVolumes",
               position: (31, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (31, 22),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (32, 9),
                   },
                  ],
                 },
                 FunctionApplication {
                  function: PropertyAccess {
                   expression: Variable {
                    identifier: "types",
                    position: (32, 16),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "listOf",
                      position: (32, 22),
                     },
                    ],
                   },
                   default: None,
                  },
                  arguments: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "types",
                     position: (32, 29),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "str",
                       position: (32, 35),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (33, 9),
                   },
                  ],
                 },
                 List {
                  elements: [],
                  position: (33, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (34, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "List of volume definitions for pam_mount.\nFor more information, visit <link\nxlink:href=\"http://pam-mount.sourceforge.net/pam_mount.conf.5.html\" />.\n",
                   },
                  ],
                  position: (34, 23),
                 },
                ),
               ],
               recursive: false,
               position: (31, 31),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "additionalSearchPaths",
               position: (41, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (41, 31),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (42, 9),
                   },
                  ],
                 },
                 FunctionApplication {
                  function: PropertyAccess {
                   expression: Variable {
                    identifier: "types",
                    position: (42, 16),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "listOf",
                      position: (42, 22),
                     },
                    ],
                   },
                   default: None,
                  },
                  arguments: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "types",
                     position: (42, 29),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "package",
                       position: (42, 35),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (43, 9),
                   },
                  ],
                 },
                 List {
                  elements: [],
                  position: (43, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "example",
                    position: (44, 9),
                   },
                  ],
                 },
                 FunctionApplication {
                  function: Variable {
                   identifier: "literalExpression",
                   position: (44, 19),
                  },
                  arguments: [
                   String {
                    parts: [
                     Raw {
                      content: "[ pkgs.bindfs ]",
                     },
                    ],
                    position: (44, 37),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (45, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Additional programs to include in the search path of pam_mount.\nUseful for example if you want to use some FUSE filesystems like bindfs.\n",
                   },
                  ],
                  position: (45, 23),
                 },
                ),
               ],
               recursive: false,
               position: (41, 40),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "fuseMountOptions",
               position: (51, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (51, 26),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (52, 9),
                   },
                  ],
                 },
                 FunctionApplication {
                  function: PropertyAccess {
                   expression: Variable {
                    identifier: "types",
                    position: (52, 16),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "listOf",
                      position: (52, 22),
                     },
                    ],
                   },
                   default: None,
                  },
                  arguments: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "types",
                     position: (52, 29),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "str",
                       position: (52, 35),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (53, 9),
                   },
                  ],
                 },
                 List {
                  elements: [],
                  position: (53, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "example",
                    position: (54, 9),
                   },
                  ],
                 },
                 FunctionApplication {
                  function: Variable {
                   identifier: "literalExpression",
                   position: (54, 19),
                  },
                  arguments: [
                   String {
                    parts: [
                     Raw {
                      content: "[ \"nodev\" \"nosuid\" \"force-user=%(USER)\" \"gid=%(USERGID)\" \"perms=0700\" \"chmod-deny\" \"chown-deny\" \"chgrp-deny\" ]\n",
                     },
                    ],
                    position: (54, 37),
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (57, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Global mount options that apply to every FUSE volume.\nYou can define volume-specific options in the volume definitions.\n",
                   },
                  ],
                  position: (57, 23),
                 },
                ),
               ],
               recursive: false,
               position: (51, 35),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "debugLevel",
               position: (63, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (63, 20),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (64, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (64, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "int",
                     position: (64, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (65, 9),
                   },
                  ],
                 },
                 Int {
                  value: 0,
                  position: (65, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "example",
                    position: (66, 9),
                   },
                  ],
                 },
                 Int {
                  value: 1,
                  position: (66, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (67, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Sets the Debug-Level. 0 disables debugging, 1 enables pam_mount tracing,\nand 2 additionally enables tracing in mount.crypt. The default is 0.\nFor more information, visit <link\nxlink:href=\"http://pam-mount.sourceforge.net/pam_mount.conf.5.html\" />.\n",
                   },
                  ],
                  position: (67, 23),
                 },
                ),
               ],
               recursive: false,
               position: (63, 29),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "logoutWait",
               position: (75, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (75, 20),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (76, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (76, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "int",
                     position: (76, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (77, 9),
                   },
                  ],
                 },
                 Int {
                  value: 0,
                  position: (77, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (78, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Amount of microseconds to wait until killing remaining processes after\nfinal logout.\nFor more information, visit <link\nxlink:href=\"http://pam-mount.sourceforge.net/pam_mount.conf.5.html\" />.\n",
                   },
                  ],
                  position: (78, 23),
                 },
                ),
               ],
               recursive: false,
               position: (75, 29),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "logoutHup",
               position: (86, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (86, 19),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (87, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (87, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (87, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (88, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (88, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (89, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Kill remaining processes after logout by sending a SIGHUP.\n",
                   },
                  ],
                  position: (89, 23),
                 },
                ),
               ],
               recursive: false,
               position: (86, 28),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "logoutTerm",
               position: (94, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (94, 20),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (95, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (95, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (95, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (96, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (96, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (97, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Kill remaining processes after logout by sending a SIGTERM.\n",
                   },
                  ],
                  position: (97, 23),
                 },
                ),
               ],
               recursive: false,
               position: (94, 29),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "logoutKill",
               position: (102, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (102, 20),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (103, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (103, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (103, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (104, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (104, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (105, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Kill remaining processes after logout by sending a SIGKILL.\n",
                   },
                  ],
                  position: (105, 23),
                 },
                ),
               ],
               recursive: false,
               position: (102, 29),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "createMountPoints",
               position: (110, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (110, 27),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (111, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (111, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (111, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (112, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (112, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (113, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Create mountpoints for volumes if they do not exist.\n",
                   },
                  ],
                  position: (113, 23),
                 },
                ),
               ],
               recursive: false,
               position: (110, 36),
              },
             ],
            },
           ),
           KeyValue(
            AttributePath {
             attributes: [
              Raw {
               content: "removeCreatedMountPoints",
               position: (118, 7),
              },
             ],
            },
            FunctionApplication {
             function: Variable {
              identifier: "mkOption",
              position: (118, 34),
             },
             arguments: [
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "type",
                    position: (119, 9),
                   },
                  ],
                 },
                 PropertyAccess {
                  expression: Variable {
                   identifier: "types",
                   position: (119, 16),
                  },
                  attribute_path: AttributePath {
                   attributes: [
                    Raw {
                     content: "bool",
                     position: (119, 22),
                    },
                   ],
                  },
                  default: None,
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "default",
                    position: (120, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (120, 19),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "description",
                    position: (121, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "Remove mountpoints created by pam_mount after logout. This\nonly affects mountpoints that have been created by pam_mount\nin the same session.\n",
                   },
                  ],
                  position: (121, 23),
                 },
                ),
               ],
               recursive: false,
               position: (118, 43),
              },
             ],
            },
           ),
          ],
          recursive: false,
          position: (22, 26),
         },
        ),
       ],
       recursive: false,
       position: (20, 13),
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "config",
         position: (131, 3),
        },
       ],
      },
      FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (131, 12),
       },
       arguments: [
        BinaryOperation {
         operator: LogicalOr,
         operands: [
          PropertyAccess {
           expression: Variable {
            identifier: "cfg",
            position: (131, 18),
           },
           attribute_path: AttributePath {
            attributes: [
             Raw {
              content: "enable",
              position: (131, 22),
             },
            ],
           },
           default: None,
          },
          Variable {
           identifier: "anyPamMount",
           position: (131, 32),
          },
         ],
         position: (131, 29),
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "environment",
              position: (133, 5),
             },
             Raw {
              content: "systemPackages",
              position: (133, 17),
             },
            ],
           },
           List {
            elements: [
             PropertyAccess {
              expression: Variable {
               identifier: "pkgs",
               position: (133, 36),
              },
              attribute_path: AttributePath {
               attributes: [
                Raw {
                 content: "pam_mount",
                 position: (133, 41),
                },
               ],
              },
              default: None,
             },
            ],
            position: (133, 34),
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "environment",
              position: (134, 5),
             },
             Raw {
              content: "etc",
              position: (134, 17),
             },
             Expression {
              expression: __StringParts(
               [
                Raw {
                 content: "security/pam_mount.conf.xml",
                },
               ],
              ),
             },
            ],
           },
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "source",
                 position: (135, 7),
                },
               ],
              },
              LetIn {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "extraUserVolumes",
                    position: (137, 11),
                   },
                  ],
                 },
                 FunctionApplication {
                  function: Variable {
                   identifier: "filterAttrs",
                   position: (137, 30),
                  },
                  arguments: [
                   Function {
                    argument: Some(
                     "n",
                    ),
                    arguments: FunctionArguments {
                     arguments: [],
                     ellipsis: false,
                    },
                    definition: Function {
                     argument: Some(
                      "u",
                     ),
                     arguments: FunctionArguments {
                      arguments: [],
                      ellipsis: false,
                     },
                     definition: BinaryOperation {
                      operator: LogicalOr,
                      operands: [
                       BinaryOperation {
                        operator: NotEqualTo,
                        operands: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "u",
                           position: (137, 49),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "cryptHomeLuks",
                             position: (137, 51),
                            },
                           ],
                          },
                          default: None,
                         },
                         Variable {
                          identifier: "null",
                          position: (137, 68),
                         },
                        ],
                        position: (137, 65),
                       },
                       BinaryOperation {
                        operator: NotEqualTo,
                        operands: [
                         PropertyAccess {
                          expression: Variable {
                           identifier: "u",
                           position: (137, 76),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "pamMount",
                             position: (137, 78),
                            },
                           ],
                          },
                          default: None,
                         },
                         Map {
                          bindings: [],
                          recursive: false,
                          position: (137, 90),
                         },
                        ],
                        position: (137, 87),
                       },
                      ],
                      position: (137, 73),
                     },
                     position: (137, 46),
                    },
                    position: (137, 43),
                   },
                   PropertyAccess {
                    expression: Variable {
                     identifier: "config",
                     position: (137, 94),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "users",
                       position: (137, 101),
                      },
                      Raw {
                       content: "users",
                       position: (137, 107),
                      },
                     ],
                    },
                    default: None,
                   },
                  ],
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "mkAttr",
                    position: (138, 11),
                   },
                  ],
                 },
                 Function {
                  argument: Some(
                   "k",
                  ),
                  arguments: FunctionArguments {
                   arguments: [],
                   ellipsis: false,
                  },
                  definition: Function {
                   argument: Some(
                    "v",
                   ),
                   arguments: FunctionArguments {
                    arguments: [],
                    ellipsis: false,
                   },
                   definition: String {
                    parts: [
                     Expression {
                      expression: Variable {
                       identifier: "k",
                       position: (138, 30),
                      },
                     },
                     Raw {
                      content: "=\"",
                     },
                     Expression {
                      expression: Variable {
                       identifier: "v",
                       position: (138, 36),
                      },
                     },
                     Raw {
                      content: "\"",
                     },
                    ],
                    position: (138, 26),
                   },
                   position: (138, 23),
                  },
                  position: (138, 20),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "userVolumeEntry",
                    position: (139, 11),
                   },
                  ],
                 },
                 Function {
                  argument: Some(
                   "user",
                  ),
                  arguments: FunctionArguments {
                   arguments: [],
                   ellipsis: false,
                  },
                  definition: LetIn {
                   bindings: [
                    KeyValue(
                     AttributePath {
                      attributes: [
                       Raw {
                        content: "attrs",
                        position: (140, 13),
                       },
                      ],
                     },
                     BinaryOperation {
                      operator: Update,
                      operands: [
                       Map {
                        bindings: [
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "user",
                             position: (141, 15),
                            },
                           ],
                          },
                          PropertyAccess {
                           expression: Variable {
                            identifier: "user",
                            position: (141, 22),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "name",
                              position: (141, 27),
                             },
                            ],
                           },
                           default: None,
                          },
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "path",
                             position: (142, 15),
                            },
                           ],
                          },
                          PropertyAccess {
                           expression: Variable {
                            identifier: "user",
                            position: (142, 22),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "cryptHomeLuks",
                              position: (142, 27),
                             },
                            ],
                           },
                           default: None,
                          },
                         ),
                         KeyValue(
                          AttributePath {
                           attributes: [
                            Raw {
                             content: "mountpoint",
                             position: (143, 15),
                            },
                           ],
                          },
                          PropertyAccess {
                           expression: Variable {
                            identifier: "user",
                            position: (143, 28),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "home",
                              position: (143, 33),
                             },
                            ],
                           },
                           default: None,
                          },
                         ),
                        ],
                        recursive: false,
                        position: (140, 21),
                       },
                       PropertyAccess {
                        expression: Variable {
                         identifier: "user",
                         position: (144, 18),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "pamMount",
                           position: (144, 23),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                      position: (144, 15),
                     },
                    ),
                   ],
                   target: String {
                    parts: [
                     Raw {
                      content: "<volume ",
                     },
                     Expression {
                      expression: FunctionApplication {
                       function: Variable {
                        identifier: "concatStringsSep",
                        position: (146, 24),
                       },
                       arguments: [
                        String {
                         parts: [
                          Raw {
                           content: " ",
                          },
                         ],
                         position: (146, 41),
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "mapAttrsToList",
                          position: (146, 46),
                         },
                         arguments: [
                          Variable {
                           identifier: "mkAttr",
                           position: (146, 61),
                          },
                          Variable {
                           identifier: "attrs",
                           position: (146, 68),
                          },
                         ],
                        },
                       ],
                      },
                     },
                     Raw {
                      content: " />\n",
                     },
                    ],
                    position: (146, 13),
                   },
                   position: (139, 35),
                  },
                  position: (139, 29),
                 },
                ),
               ],
               target: FunctionApplication {
                function: PropertyAccess {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (148, 10),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "writeText",
                    position: (148, 15),
                   },
                  ],
                 },
                 default: None,
                },
                arguments: [
                 String {
                  parts: [
                   Raw {
                    content: "pam_mount.conf.xml",
                   },
                  ],
                  position: (148, 25),
                 },
                 String {
                  parts: [
                   Raw {
                    content: "<?xml version=\"1.0\" encoding=\"utf-8\" ?>\n<!DOCTYPE pam_mount SYSTEM \"pam_mount.conf.xml.dtd\">\n<!-- auto generated from Nixos: modules/config/users-groups.nix -->\n<pam_mount>\n<debug enable=\"",
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "toString",
                      position: (153, 28),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (153, 37),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "debugLevel",
                          position: (153, 41),
                         },
                        ],
                       },
                       default: None,
                      },
                     ],
                    },
                   },
                   Raw {
                    content: "\" />\n<!-- if activated, requires ofl from hxtools to be present -->\n<logout wait=\"",
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "toString",
                      position: (155, 27),
                     },
                     arguments: [
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (155, 36),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "logoutWait",
                          position: (155, 40),
                         },
                        ],
                       },
                       default: None,
                      },
                     ],
                    },
                   },
                   Raw {
                    content: "\" hup=\"",
                   },
                   Expression {
                    expression: IfThenElse {
                     predicate: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (155, 63),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "logoutHup",
                         position: (155, 67),
                        },
                       ],
                      },
                      default: None,
                     },
                     then: String {
                      parts: [
                       Raw {
                        content: "yes",
                       },
                      ],
                      position: (155, 82),
                     },
                     else_: String {
                      parts: [
                       Raw {
                        content: "no",
                       },
                      ],
                      position: (155, 93),
                     },
                     position: (155, 60),
                    },
                   },
                   Raw {
                    content: "\" term=\"",
                   },
                   Expression {
                    expression: IfThenElse {
                     predicate: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (155, 111),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "logoutTerm",
                         position: (155, 115),
                        },
                       ],
                      },
                      default: None,
                     },
                     then: String {
                      parts: [
                       Raw {
                        content: "yes",
                       },
                      ],
                      position: (155, 131),
                     },
                     else_: String {
                      parts: [
                       Raw {
                        content: "no",
                       },
                      ],
                      position: (155, 142),
                     },
                     position: (155, 108),
                    },
                   },
                   Raw {
                    content: "\" kill=\"",
                   },
                   Expression {
                    expression: IfThenElse {
                     predicate: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (155, 160),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "logoutKill",
                         position: (155, 164),
                        },
                       ],
                      },
                      default: None,
                     },
                     then: String {
                      parts: [
                       Raw {
                        content: "yes",
                       },
                      ],
                      position: (155, 180),
                     },
                     else_: String {
                      parts: [
                       Raw {
                        content: "no",
                       },
                      ],
                      position: (155, 191),
                     },
                     position: (155, 157),
                    },
                   },
                   Raw {
                    content: "\" />\n<!-- set PATH variable for pam_mount module -->\n<path>",
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "makeBinPath",
                      position: (157, 19),
                     },
                     arguments: [
                      BinaryOperation {
                       operator: Concatenation,
                       operands: [
                        List {
                         elements: [
                          PropertyAccess {
                           expression: Variable {
                            identifier: "pkgs",
                            position: (157, 34),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "util-linux",
                              position: (157, 39),
                             },
                            ],
                           },
                           default: None,
                          },
                         ],
                         position: (157, 32),
                        },
                        PropertyAccess {
                         expression: Variable {
                          identifier: "cfg",
                          position: (157, 55),
                         },
                         attribute_path: AttributePath {
                          attributes: [
                           Raw {
                            content: "additionalSearchPaths",
                            position: (157, 59),
                           },
                          ],
                         },
                         default: None,
                        },
                       ],
                       position: (157, 52),
                      },
                     ],
                    },
                   },
                   Raw {
                    content: "</path>\n<!-- create mount point if not present -->\n<mkmountpoint enable=\"",
                   },
                   Expression {
                    expression: IfThenElse {
                     predicate: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (159, 38),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "createMountPoints",
                         position: (159, 42),
                        },
                       ],
                      },
                      default: None,
                     },
                     then: String {
                      parts: [
                       Raw {
                        content: "1",
                       },
                      ],
                      position: (159, 65),
                     },
                     else_: String {
                      parts: [
                       Raw {
                        content: "0",
                       },
                      ],
                      position: (159, 74),
                     },
                     position: (159, 35),
                    },
                   },
                   Raw {
                    content: "\" remove=\"",
                   },
                   Expression {
                    expression: IfThenElse {
                     predicate: PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (159, 93),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "removeCreatedMountPoints",
                         position: (159, 97),
                        },
                       ],
                      },
                      default: None,
                     },
                     then: String {
                      parts: [
                       Raw {
                        content: "true",
                       },
                      ],
                      position: (159, 127),
                     },
                     else_: String {
                      parts: [
                       Raw {
                        content: "false",
                       },
                      ],
                      position: (159, 139),
                     },
                     position: (159, 90),
                    },
                   },
                   Raw {
                    content: "\" />\n<!-- specify the binaries to be called -->\n<fusemount>",
                   },
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "pkgs",
                      position: (161, 24),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "fuse",
                        position: (161, 29),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/mount.fuse %(VOLUME) %(MNTPT) -o ",
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "concatStringsSep",
                      position: (161, 74),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: ",",
                        },
                       ],
                       position: (161, 91),
                      },
                      BinaryOperation {
                       operator: Concatenation,
                       operands: [
                        PropertyAccess {
                         expression: Variable {
                          identifier: "cfg",
                          position: (161, 96),
                         },
                         attribute_path: AttributePath {
                          attributes: [
                           Raw {
                            content: "fuseMountOptions",
                            position: (161, 100),
                           },
                          ],
                         },
                         default: None,
                        },
                        List {
                         elements: [
                          String {
                           parts: [
                            Raw {
                             content: "%(OPTIONS)",
                            },
                           ],
                           position: (161, 122),
                          },
                         ],
                         position: (161, 120),
                        },
                       ],
                       position: (161, 117),
                      },
                     ],
                    },
                   },
                   Raw {
                    content: "</fusemount>\n<fuseumount>",
                   },
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "pkgs",
                      position: (162, 25),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "fuse",
                        position: (162, 30),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/fusermount -u %(MNTPT)</fuseumount>\n<cryptmount>",
                   },
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "pkgs",
                      position: (163, 25),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "pam_mount",
                        position: (163, 30),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/mount.crypt %(VOLUME) %(MNTPT)</cryptmount>\n<cryptumount>",
                   },
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "pkgs",
                      position: (164, 26),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "pam_mount",
                        position: (164, 31),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/umount.crypt %(MNTPT)</cryptumount>\n<pmvarrun>",
                   },
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "pkgs",
                      position: (165, 23),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "pam_mount",
                        position: (165, 28),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/pmvarrun -u %(USER) -o %(OPERATION)</pmvarrun>\n",
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "optionalString",
                      position: (166, 13),
                     },
                     arguments: [
                      Variable {
                       identifier: "oflRequired",
                       position: (166, 28),
                      },
                      String {
                       parts: [
                        Raw {
                         content: "<ofl>",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "fake_ofl",
                          position: (166, 48),
                         },
                        },
                        Raw {
                         content: "/bin/fake_ofl %(SIGNAL) %(MNTPT)</ofl>",
                        },
                       ],
                       position: (166, 40),
                      },
                     ],
                    },
                   },
                   Raw {
                    content: "\n",
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "concatStrings",
                      position: (167, 13),
                     },
                     arguments: [
                      FunctionApplication {
                       function: Variable {
                        identifier: "map",
                        position: (167, 28),
                       },
                       arguments: [
                        Variable {
                         identifier: "userVolumeEntry",
                         position: (167, 32),
                        },
                        FunctionApplication {
                         function: Variable {
                          identifier: "attrValues",
                          position: (167, 49),
                         },
                         arguments: [
                          Variable {
                           identifier: "extraUserVolumes",
                           position: (167, 60),
                          },
                         ],
                        },
                       ],
                      },
                     ],
                    },
                   },
                   Raw {
                    content: "\n",
                   },
                   Expression {
                    expression: FunctionApplication {
                     function: Variable {
                      identifier: "concatStringsSep",
                      position: (168, 13),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "\n",
                        },
                       ],
                       position: (168, 30),
                      },
                      PropertyAccess {
                       expression: Variable {
                        identifier: "cfg",
                        position: (168, 35),
                       },
                       attribute_path: AttributePath {
                        attributes: [
                         Raw {
                          content: "extraVolumes",
                          position: (168, 39),
                         },
                        ],
                       },
                       default: None,
                      },
                     ],
                    },
                   },
                   Raw {
                    content: "\n</pam_mount>\n",
                   },
                  ],
                  position: (148, 46),
                 },
                ],
               },
               position: (136, 9),
              },
             ),
            ],
            recursive: false,
            position: (134, 53),
           },
          ),
         ],
         recursive: false,
         position: (131, 45),
        },
       ],
      },
     ),
    ],
    recursive: false,
    position: (19, 1),
   },
   position: (5, 1),
  },
  position: (3, 1),
 },
 position: (1, 1),
}