---
Function {
 argument: Destructured {
  identifier: None,
  arguments: [
   DestructuredArgument {
    identifier: "config",
    default: None,
   },
   DestructuredArgument {
    identifier: "lib",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (2, 6),
  },
  target: LetIn {
   bindings: [
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfg",
        position: (4, 3),
       },
      ],
     },
     to: PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (4, 9),
      },
      attribute_path: AttributePath {
       parts: [
        Raw {
         content: "hardware",
         position: (4, 16),
        },
        Raw {
         content: "cpu",
         position: (4, 25),
        },
        Raw {
         content: "intel",
         position: (4, 29),
        },
        Raw {
         content: "sgx",
         position: (4, 35),
        },
       ],
      },
      default: None,
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "defaultPrvGroup",
        position: (5, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: "sgx_prv",
        position: (5, 22),
       },
      ],
      position: (5, 21),
     },
    },
   ],
   target: Map {
    bindings: [
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "options",
         position: (8, 3),
        },
        Raw {
         content: "hardware",
         position: (8, 11),
        },
        Raw {
         content: "cpu",
         position: (8, 20),
        },
        Raw {
         content: "intel",
         position: (8, 24),
        },
        Raw {
         content: "sgx",
         position: (8, 30),
        },
        Raw {
         content: "enableDcapCompat",
         position: (8, 34),
        },
       ],
      },
      to: FunctionApplication {
       function: Variable {
        identifier: "mkOption",
        position: (8, 53),
       },
       arguments: [
        Map {
         bindings: [
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "description",
              position: (9, 5),
             },
            ],
           },
           to: String {
            parts: [
             Raw {
              content: "Whether to enable backward compatibility for SGX software build for the\nout-of-tree Intel SGX DCAP driver.\n\nCreates symbolic links for the SGX devices <literal>/dev/sgx_enclave</literal>\nand <literal>/dev/sgx_provision</literal> to make them available as\n<literal>/dev/sgx/enclave</literal>  and <literal>/dev/sgx/provision</literal>,\nrespectively.\n",
              position: (10, 1),
             },
            ],
            position: (9, 19),
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "type",
              position: (18, 5),
             },
            ],
           },
           to: PropertyAccess {
            expression: Variable {
             identifier: "types",
             position: (18, 12),
            },
            attribute_path: AttributePath {
             parts: [
              Raw {
               content: "bool",
               position: (18, 18),
              },
             ],
            },
            default: None,
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "default",
              position: (19, 5),
             },
            ],
           },
           to: Variable {
            identifier: "true",
            position: (19, 15),
           },
          },
         ],
         recursive: false,
         position: (8, 62),
        },
       ],
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "options",
         position: (22, 3),
        },
        Raw {
         content: "hardware",
         position: (22, 11),
        },
        Raw {
         content: "cpu",
         position: (22, 20),
        },
        Raw {
         content: "intel",
         position: (22, 24),
        },
        Raw {
         content: "sgx",
         position: (22, 30),
        },
        Raw {
         content: "provision",
         position: (22, 34),
        },
       ],
      },
      to: Map {
       bindings: [
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "enable",
            position: (23, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkEnableOption",
           position: (23, 14),
          },
          arguments: [
           String {
            parts: [
             Raw {
              content: "access to the Intel SGX provisioning device",
              position: (23, 30),
             },
            ],
            position: (23, 29),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "user",
            position: (24, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (24, 12),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (25, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Owner to assign to the SGX provisioning device.",
                 position: (25, 22),
                },
               ],
               position: (25, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (26, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (26, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "str",
                  position: (26, 20),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (27, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "root",
                 position: (27, 18),
                },
               ],
               position: (27, 17),
              },
             },
            ],
            recursive: false,
            position: (24, 21),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "group",
            position: (29, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (29, 13),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (30, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Group to assign to the SGX provisioning device.",
                 position: (30, 22),
                },
               ],
               position: (30, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (31, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (31, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "str",
                  position: (31, 20),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (32, 7),
                },
               ],
              },
              to: Variable {
               identifier: "defaultPrvGroup",
               position: (32, 17),
              },
             },
            ],
            recursive: false,
            position: (29, 22),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "mode",
            position: (34, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (34, 12),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (35, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Mode to set for the SGX provisioning device.",
                 position: (35, 22),
                },
               ],
               position: (35, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (36, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (36, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "str",
                  position: (36, 20),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (37, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "0660",
                 position: (37, 18),
                },
               ],
               position: (37, 17),
              },
             },
            ],
            recursive: false,
            position: (34, 21),
           },
          ],
         },
        },
       ],
       recursive: false,
       position: (22, 46),
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "config",
         position: (41, 3),
        },
       ],
      },
      to: FunctionApplication {
       function: Variable {
        identifier: "mkMerge",
        position: (41, 12),
       },
       arguments: [
        List {
         elements: [
          Parentheses {
           expression: FunctionApplication {
            function: Variable {
             identifier: "mkIf",
             position: (42, 6),
            },
            arguments: [
             PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (42, 11),
              },
              attribute_path: AttributePath {
               parts: [
                Raw {
                 content: "provision",
                 position: (42, 15),
                },
                Raw {
                 content: "enable",
                 position: (42, 25),
                },
               ],
              },
              default: None,
             },
             Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "assertions",
                   position: (43, 7),
                  },
                 ],
                },
                to: List {
                 elements: [
                  Map {
                   bindings: [
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "assertion",
                        position: (45, 11),
                       },
                      ],
                     },
                     to: FunctionApplication {
                      function: Variable {
                       identifier: "hasAttr",
                       position: (45, 23),
                      },
                      arguments: [
                       PropertyAccess {
                        expression: Variable {
                         identifier: "cfg",
                         position: (45, 31),
                        },
                        attribute_path: AttributePath {
                         parts: [
                          Raw {
                           content: "provision",
                           position: (45, 35),
                          },
                          Raw {
                           content: "user",
                           position: (45, 45),
                          },
                         ],
                        },
                        default: None,
                       },
                       PropertyAccess {
                        expression: Variable {
                         identifier: "config",
                         position: (45, 50),
                        },
                        attribute_path: AttributePath {
                         parts: [
                          Raw {
                           content: "users",
                           position: (45, 57),
                          },
                          Raw {
                           content: "users",
                           position: (45, 63),
                          },
                         ],
                        },
                        default: None,
                       },
                      ],
                     },
                    },
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "message",
                        position: (46, 11),
                       },
                      ],
                     },
                     to: String {
                      parts: [
                       Raw {
                        content: "Given user does not exist",
                        position: (46, 22),
                       },
                      ],
                      position: (46, 21),
                     },
                    },
                   ],
                   recursive: false,
                   position: (44, 9),
                  },
                  Map {
                   bindings: [
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "assertion",
                        position: (49, 11),
                       },
                      ],
                     },
                     to: BinaryOperation {
                      operator: LogicalOr,
                      operands: [
                       Parentheses {
                        expression: BinaryOperation {
                         operator: EqualTo,
                         operands: [
                          PropertyAccess {
                           expression: Variable {
                            identifier: "cfg",
                            position: (49, 24),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "provision",
                              position: (49, 28),
                             },
                             Raw {
                              content: "group",
                              position: (49, 38),
                             },
                            ],
                           },
                           default: None,
                          },
                          Variable {
                           identifier: "defaultPrvGroup",
                           position: (49, 47),
                          },
                         ],
                         position: (49, 44),
                        },
                        position: (49, 23),
                       },
                       Parentheses {
                        expression: FunctionApplication {
                         function: Variable {
                          identifier: "hasAttr",
                          position: (49, 68),
                         },
                         arguments: [
                          PropertyAccess {
                           expression: Variable {
                            identifier: "cfg",
                            position: (49, 76),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "provision",
                              position: (49, 80),
                             },
                             Raw {
                              content: "group",
                              position: (49, 90),
                             },
                            ],
                           },
                           default: None,
                          },
                          PropertyAccess {
                           expression: Variable {
                            identifier: "config",
                            position: (49, 96),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "users",
                              position: (49, 103),
                             },
                             Raw {
                              content: "groups",
                              position: (49, 109),
                             },
                            ],
                           },
                           default: None,
                          },
                         ],
                        },
                        position: (49, 67),
                       },
                      ],
                      position: (49, 64),
                     },
                    },
                    Binding {
                     from: AttributePath {
                      parts: [
                       Raw {
                        content: "message",
                        position: (50, 11),
                       },
                      ],
                     },
                     to: String {
                      parts: [
                       Raw {
                        content: "Given group does not exist",
                        position: (50, 22),
                       },
                      ],
                      position: (50, 21),
                     },
                    },
                   ],
                   recursive: false,
                   position: (48, 9),
                  },
                 ],
                 position: (43, 20),
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "users",
                   position: (54, 7),
                  },
                  Raw {
                   content: "groups",
                   position: (54, 13),
                  },
                 ],
                },
                to: FunctionApplication {
                 function: Variable {
                  identifier: "optionalAttrs",
                  position: (54, 22),
                 },
                 arguments: [
                  Parentheses {
                   expression: BinaryOperation {
                    operator: EqualTo,
                    operands: [
                     PropertyAccess {
                      expression: Variable {
                       identifier: "cfg",
                       position: (54, 37),
                      },
                      attribute_path: AttributePath {
                       parts: [
                        Raw {
                         content: "provision",
                         position: (54, 41),
                        },
                        Raw {
                         content: "group",
                         position: (54, 51),
                        },
                       ],
                      },
                      default: None,
                     },
                     Variable {
                      identifier: "defaultPrvGroup",
                      position: (54, 60),
                     },
                    ],
                    position: (54, 57),
                   },
                   position: (54, 36),
                  },
                  Map {
                   bindings: [
                    Binding {
                     from: AttributePath {
                      parts: [
                       Expression {
                        ast: String {
                         parts: [
                          Interpolation {
                           expression: PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (55, 12),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "provision",
                               position: (55, 16),
                              },
                              Raw {
                               content: "group",
                               position: (55, 26),
                              },
                             ],
                            },
                            default: None,
                           },
                          },
                         ],
                         position: (55, 9),
                        },
                       },
                      ],
                     },
                     to: Map {
                      bindings: [],
                      recursive: false,
                      position: (55, 36),
                     },
                    },
                   ],
                   recursive: false,
                   position: (54, 77),
                  },
                 ],
                },
               },
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "services",
                   position: (58, 7),
                  },
                  Raw {
                   content: "udev",
                   position: (58, 16),
                  },
                  Raw {
                   content: "extraRules",
                   position: (58, 21),
                  },
                 ],
                },
                to: With {
                 expression: PropertyAccess {
                  expression: Variable {
                   identifier: "cfg",
                   position: (58, 39),
                  },
                  attribute_path: AttributePath {
                   parts: [
                    Raw {
                     content: "provision",
                     position: (58, 43),
                    },
                   ],
                  },
                  default: None,
                 },
                 target: String {
                  parts: [
                   Raw {
                    content: "SUBSYSTEM==\"misc\", KERNEL==\"sgx_provision\", OWNER=\"",
                    position: (59, 1),
                   },
                   Interpolation {
                    expression: Variable {
                     identifier: "user",
                     position: (59, 62),
                    },
                   },
                   Raw {
                    content: "\", GROUP=\"",
                    position: (59, 67),
                   },
                   Interpolation {
                    expression: Variable {
                     identifier: "group",
                     position: (59, 79),
                    },
                   },
                   Raw {
                    content: "\", MODE=\"",
                    position: (59, 85),
                   },
                   Interpolation {
                    expression: Variable {
                     identifier: "mode",
                     position: (59, 96),
                    },
                   },
                   Raw {
                    content: "\"\n",
                    position: (59, 101),
                   },
                  ],
                  position: (58, 54),
                 },
                 position: (58, 34),
                },
               },
              ],
              recursive: false,
              position: (42, 32),
             },
            ],
           },
           position: (42, 5),
          },
          Parentheses {
           expression: FunctionApplication {
            function: Variable {
             identifier: "mkIf",
             position: (62, 6),
            },
            arguments: [
             PropertyAccess {
              expression: Variable {
               identifier: "cfg",
               position: (62, 11),
              },
              attribute_path: AttributePath {
               parts: [
                Raw {
                 content: "enableDcapCompat",
                 position: (62, 15),
                },
               ],
              },
              default: None,
             },
             Map {
              bindings: [
               Binding {
                from: AttributePath {
                 parts: [
                  Raw {
                   content: "services",
                   position: (63, 7),
                  },
                  Raw {
                   content: "udev",
                   position: (63, 16),
                  },
                  Raw {
                   content: "extraRules",
                   position: (63, 21),
                  },
                 ],
                },
                to: String {
                 parts: [
                  Raw {
                   content: "SUBSYSTEM==\"misc\", KERNEL==\"sgx_enclave\",   SYMLINK+=\"sgx/enclave\"\nSUBSYSTEM==\"misc\", KERNEL==\"sgx_provision\", SYMLINK+=\"sgx/provision\"\n",
                   position: (64, 1),
                  },
                 ],
                 position: (63, 34),
                },
               },
              ],
              recursive: false,
              position: (62, 32),
             },
            ],
           },
           position: (62, 5),
          },
         ],
         position: (41, 20),
        },
       ],
      },
     },
    ],
    recursive: false,
    position: (7, 1),
   },
   position: (3, 1),
  },
  position: (2, 1),
 },
 position: (1, 1),
}