(CommandList
  children: [
    (Assignment
      keyword: Assign_None
      pairs: [(assign_pair lhs:(LhsName name:tid) op:Equal rhs:{(DQ ('forced command'))} spids:[7])]
      spids: [7]
    )
    (C {(cp)} {($ VSub_Name '$OBJ') (/sshd_proxy)} {($ VSub_Name '$OBJ') (/sshd_proxy_bak)})
    (C {(cp)} {(/dev/null)} {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')})
    (ForEach
      iter_name: t
      iter_words: [{(${ VSub_Name SSH_KEYTYPES)}]
      do_arg_iter: False
      body: 
        (DoGroup
          children: [
            (SimpleCommand
              words: [{(printf)} {(SQ <'command="true" '>)}]
              redirects: [
                (Redir
                  op_id: Redir_DGreat
                  fd: -1
                  arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')}
                  spids: [50]
                )
              ]
            )
            (SimpleCommand
              words: [{(cat)} {($ VSub_Name '$OBJ') (/) ($ VSub_Name '$t') (.pub)}]
              redirects: [
                (Redir
                  op_id: Redir_DGreat
                  fd: -1
                  arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')}
                  spids: [63]
                )
              ]
            )
          ]
          spids: [41 69]
        )
      spids: [35 39]
    )
    (ForEach
      iter_name: p
      iter_words: [{(${ VSub_Name SSH_PROTOCOLS)}]
      do_arg_iter: False
      body: 
        (DoGroup
          children: [
            (C {(trace)} {(DQ ('forced command in key option proto ') ($ VSub_Name '$p'))})
            (AndOr
              children: [
                (C {(${ VSub_Name SSH)} {(-) ($ VSub_Name '$p')} {(-F)} 
                  {($ VSub_Name '$OBJ') (/ssh_proxy)} {(somehost)} {(false)} {(EscapedLiteralPart token:<Lit_EscapedChar '\\ '>)}
                )
                (C {(fail)} {(DQ ('forced command in key proto ') ($ VSub_Name '$p'))})
              ]
              op_id: Op_DPipe
            )
          ]
          spids: [83 121]
        )
      spids: [77 81]
    )
    (C {(cp)} {(/dev/null)} {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')})
    (ForEach
      iter_name: t
      iter_words: [{(${ VSub_Name SSH_KEYTYPES)}]
      do_arg_iter: False
      body: 
        (DoGroup
          children: [
            (SimpleCommand
              words: [{(printf)} {(SQ <'command="false" '>)}]
              redirects: [
                (Redir
                  op_id: Redir_DGreat
                  fd: -1
                  arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')}
                  spids: [152]
                )
              ]
            )
            (SimpleCommand
              words: [{(cat)} {($ VSub_Name '$OBJ') (/) ($ VSub_Name '$t') (.pub)}]
              redirects: [
                (Redir
                  op_id: Redir_DGreat
                  fd: -1
                  arg_word: {($ VSub_Name '$OBJ') (/authorized_keys_) ($ VSub_Name '$USER')}
                  spids: [166]
                )
              ]
            )
          ]
          spids: [143 172]
        )
      spids: [137 141]
    )
    (C {(cp)} {($ VSub_Name '$OBJ') (/sshd_proxy_bak)} {($ VSub_Name '$OBJ') (/sshd_proxy)})
    (SimpleCommand
      words: [{(echo)} {(DQ ('ForceCommand true'))}]
      redirects: [
        (Redir
          op_id: Redir_DGreat
          fd: -1
          arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)}
          spids: [189]
        )
      ]
    )
    (ForEach
      iter_name: p
      iter_words: [{(${ VSub_Name SSH_PROTOCOLS)}]
      do_arg_iter: False
      body: 
        (DoGroup
          children: [
            (C {(trace)} 
              {(DQ ('forced command in sshd_config overrides key option proto ') ($ VSub_Name '$p'))}
            )
            (AndOr
              children: [
                (C {(${ VSub_Name SSH)} {(-) ($ VSub_Name '$p')} {(-F)} 
                  {($ VSub_Name '$OBJ') (/ssh_proxy)} {(somehost)} {(false)} {(EscapedLiteralPart token:<Lit_EscapedChar '\\ '>)}
                )
                (C {(fail)} {(DQ ('forced command in key proto ') ($ VSub_Name '$p'))})
              ]
              op_id: Op_DPipe
            )
          ]
          spids: [206 244]
        )
      spids: [200 204]
    )
    (C {(cp)} {($ VSub_Name '$OBJ') (/sshd_proxy_bak)} {($ VSub_Name '$OBJ') (/sshd_proxy)})
    (SimpleCommand
      words: [{(echo)} {(DQ ('ForceCommand false'))}]
      redirects: [
        (Redir
          op_id: Redir_DGreat
          fd: -1
          arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)}
          spids: [261]
        )
      ]
    )
    (SimpleCommand
      words: [{(echo)} {(DQ ('Match User ') ($ VSub_Name '$USER'))}]
      redirects: [
        (Redir
          op_id: Redir_DGreat
          fd: -1
          arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)}
          spids: [273]
        )
      ]
    )
    (SimpleCommand
      words: [{(echo)} {(DQ ('    ForceCommand true'))}]
      redirects: [
        (Redir
          op_id: Redir_DGreat
          fd: -1
          arg_word: {($ VSub_Name '$OBJ') (/sshd_proxy)}
          spids: [284]
        )
      ]
    )
    (ForEach
      iter_name: p
      iter_words: [{(${ VSub_Name SSH_PROTOCOLS)}]
      do_arg_iter: False
      body: 
        (DoGroup
          children: [
            (C {(trace)} {(DQ ('forced command with match proto ') ($ VSub_Name '$p'))})
            (AndOr
              children: [
                (C {(${ VSub_Name SSH)} {(-) ($ VSub_Name '$p')} {(-F)} 
                  {($ VSub_Name '$OBJ') (/ssh_proxy)} {(somehost)} {(false)} {(EscapedLiteralPart token:<Lit_EscapedChar '\\ '>)}
                )
                (C {(fail)} {(DQ ('forced command in key proto ') ($ VSub_Name '$p'))})
              ]
              op_id: Op_DPipe
            )
          ]
          spids: [301 339]
        )
      spids: [295 299]
    )
  ]
)