(command.If
  arms: [
    (if_arm
      cond: [
        (command.Sentence
          child: 
            (C {<Id.Lit_LBracket '['>} {<Id.KW_Bang '!'>} {<-f>} {<secret_file>} {<Id.Lit_RBracket ']'>})
          terminator: <Id.Op_Semi _>
        )
      ]
      action: [
        (C {<echo>} {(DQ <' ** creating random encryption file in ./secret_file'>)})
        (C {<touch>} {<secret_file>})
        (C {<chmod>} {<600>} {<secret_file>})
        (command.Pipeline
          children: [
            (C {<openssl>} {<rand>} {<-base64>} {<512>})
            (command.Simple
              words: [{<tr>} {<-d>} {(SQ <'\\r\\n'>)}]
              redirects: [(redir.Redir op:<Id.Redir_DGreat '>>'> fd:-1 arg_word:{<secret_file>})]
            )
          ]
          negated: F
        )
      ]
      spids: [4 17]
    )
  ]
  else_action: [(C {<echo>} {(DQ <' ** ./secret_file already exists'>)})]
)