(command.CommandList
  children: [
    (C {<hash>} {<-r>})
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:PROG)
          op: assign_op.Equal
          rhs: 
            {
              (braced_var_sub
                token: <Id.VSub_Number 0>
                suffix_op: 
                  (suffix_op.Unary
                    tok: <Id.VOp1_DPound '##'>
                    arg_word: {<Id.Lit_Other '*'> <Id.Lit_Slash '/'>}
                  )
              )
            }
          spids: [8]
        )
      ]
    )
    (command.ShFunction
      name: usage
      body: 
        (BraceGroup
          children: [
            (C {<local>} 
              {<Id.Lit_VarLike 'ret='> 
                (braced_var_sub
                  token: <Id.VSub_Number 1>
                  suffix_op: (suffix_op.Unary tok:<Id.VTest_ColonHyphen ':-'> arg_word:{<0>})
                )
              }
            )
            (command.If
              arms: [
                (if_arm
                  cond: 
                    (condition.Shell
                      commands: [
                        (command.Sentence
                          child: 
                            (C {<Id.Lit_LBracket '['>} {($ Id.VSub_DollarName '$ret')} {<-eq>} {<0>} 
                              {<Id.Lit_RBracket ']'>}
                            )
                          terminator: <Id.Op_Semi _>
                        )
                      ]
                    )
                  action: [
                    (command.Simple
                      words: [{<exec>}]
                      redirects: [
                        (redir
                          op: <Id.Redir_GreatAnd '3>&'>
                          loc: (redir_loc.Fd fd:3)
                          arg: {<1>}
                        )
                      ]
                      do_fork: T
                    )
                  ]
                  spids: [33 47]
                )
              ]
              else_action: [
                (command.Simple
                  words: [{<exec>}]
                  redirects: [(redir op:<Id.Redir_GreatAnd '3>&'> loc:(redir_loc.Fd fd:3) arg:{<2>})]
                  do_fork: T
                )
              ]
            )
            (command.Simple
              words: [{<cat>}]
              redirects: [
                (redir
                  op: <Id.Redir_DLess '<<'>
                  loc: (redir_loc.Fd fd:0)
                  arg: 
                    (redir_param.HereDoc
                      here_begin: {<EoF>}
                      here_end_span_id: 81
                      stdin_parts: [(${ Id.VSub_Name PROG) <' path-to-keyfile\n'>]
                    )
                )
                (redir op:<Id.Redir_GreatAnd '>&'> loc:(redir_loc.Fd fd:1) arg:{<3>})
              ]
              do_fork: T
            )
            (command.Simple
              words: [{<exec>}]
              redirects: [(redir op:<Id.Redir_GreatAnd '3>&'> loc:(redir_loc.Fd fd:3) arg:{<->})]
              do_fork: T
            )
            (command.ControlFlow
              token: <Id.ControlFlow_Exit exit>
              arg_word: {(${ Id.VSub_Name ret)}
            )
          ]
        )
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:keypath)
          op: assign_op.Equal
          rhs: 
            {
              (DQ 
                (braced_var_sub
                  token: <Id.VSub_Number 1>
                  suffix_op: 
                    (suffix_op.Unary
                      tok: <Id.VTest_ColonHyphen ':-'>
                      arg_word: 
                        {($ Id.VSub_DollarName '$HOME') <Id.Lit_Slash '/'> <.ssh> <Id.Lit_Slash '/'> 
                          <id_rsa.bcpc>
                        }
                    )
                )
              )
            }
          spids: [98]
        )
      ]
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:distroot)
          op: assign_op.Equal
          rhs: {<'/var/www/cobbler/pub/keys'>}
          spids: [111]
        )
      ]
    )
    (command.Pipeline
      children: [(C {<yes>}) (C {<ssh-keygen>} {<-N>} {(SQ )} {<-f>} {(DQ (${ Id.VSub_Name keypath))})]
      negated: F
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [
                (command.Sentence
                  child: 
                    (C {<Id.Lit_LBracket '['>} {<-n>} {(DQ (${ Id.VSub_Name SUDO_UID))} 
                      {<Id.Lit_RBracket ']'>}
                    )
                  terminator: <Id.Op_Semi _>
                )
              ]
            )
          action: [(C {<chown>} {(DQ (${ Id.VSub_Name SUDO_UID))} {(DQ (${ Id.VSub_Name keypath))})]
          spids: [134 150]
        )
      ]
    )
    (C {<install>} {<-D>} {(DQ (${ Id.VSub_Name keypath) <.pub>)} 
      {(DQ (${ Id.VSub_Name distroot) <'/root'>)}
    )
  ]
)