(command.CommandList
  children: [
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:tid)
          op: assign_op.Equal
          rhs: {(DQ <'change passphrase for key'>)}
          spids: [7]
        )
      ]
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:S1)
          op: assign_op.Equal
          rhs: {(DQ <secret1>)}
          spids: [13]
        )
      ]
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:S2)
          op: assign_op.Equal
          rhs: {(DQ <2secret>)}
          spids: [18]
        )
      ]
    )
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:KEYTYPES)
          op: assign_op.Equal
          rhs: 
            {
              (command_sub
                left_token: <Id.Left_Backtick '`'>
                child: (C {(${ Id.VSub_Name SSH)} {<-Q>} {<key-plain>})
              )
            }
          spids: [24]
        )
      ]
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [(command.Sentence child:(C {<ssh_version>} {<1>}) terminator:<Id.Op_Semi _>)]
            )
          action: [
            (command.ShAssignment
              pairs: [
                (assign_pair
                  lhs: (sh_lhs_expr.Name name:KEYTYPES)
                  op: assign_op.Equal
                  rhs: {(DQ (${ Id.VSub_Name KEYTYPES) <' rsa1'>)}
                  spids: [47]
                )
              ]
            )
          ]
          spids: [37 44]
        )
      ]
    )
    (command.ForEach
      iter_name: t
      iter_words: [{($ Id.VSub_DollarName '$KEYTYPES')}]
      do_arg_iter: F
      body: 
        (command.DoGroup
          children: [
            (C {<trace>} {(DQ <'generating '> ($ Id.VSub_DollarName '$t') <' key'>)})
            (C {<rm>} {<-f>} {($ Id.VSub_DollarName '$OBJ') <'/'> ($ Id.VSub_DollarName '$t') <-key>})
            (C {(${ Id.VSub_Name SSHKEYGEN)} {<-q>} {<-N>} {(${ Id.VSub_Name S1)} {<-t>} 
              {($ Id.VSub_DollarName '$t')} {<-f>} {($ Id.VSub_DollarName '$OBJ') <'/'> ($ Id.VSub_DollarName '$t') <-key>}
            )
            (command.If
              arms: [
                (if_arm
                  cond: 
                    (condition.Shell
                      commands: [
                        (command.Sentence
                          child: 
                            (C {<Id.Lit_LBracket '['>} {($ Id.VSub_QMark '$?')} {<-eq>} {<0>} 
                              {<Id.Lit_RBracket ']'>}
                            )
                          terminator: <Id.Op_Semi _>
                        )
                      ]
                    )
                  action: [
                    (command.Simple
                      words: [
                        {(${ Id.VSub_Name SSHKEYGEN)}
                        {<-p>}
                        {<-P>}
                        {(${ Id.VSub_Name S1)}
                        {<-N>}
                        {(${ Id.VSub_Name S2)}
                        {<-f>}
                        {($ Id.VSub_DollarName '$OBJ') <'/'> ($ Id.VSub_DollarName '$t') <-key>}
                      ]
                      redirects: [
                        (redir
                          op: <Id.Redir_Great '>'>
                          loc: (redir_loc.Fd fd:1)
                          arg: {<'/dev/null'>}
                        )
                      ]
                      do_fork: T
                    )
                    (command.If
                      arms: [
                        (if_arm
                          cond: 
                            (condition.Shell
                              commands: [
                                (command.Sentence
                                  child: 
                                    (C {<Id.Lit_LBracket '['>} {($ Id.VSub_QMark '$?')} {<-ne>} {<0>} 
                                      {<Id.Lit_RBracket ']'>}
                                    )
                                  terminator: <Id.Op_Semi _>
                                )
                              ]
                            )
                          action: [
                            (C {<fail>} 
                              {(DQ <'ssh-keygen -p failed for '> ($ Id.VSub_DollarName '$t') <-key>)}
                            )
                          ]
                          spids: [163 176]
                        )
                      ]
                    )
                  ]
                  spids: [117 130]
                )
              ]
              else_action: [
                (C {<fail>} {(DQ <'ssh-keygen for '> ($ Id.VSub_DollarName '$t') <'-key failed'>)})
              ]
            )
            (C {<rm>} {<-f>} {($ Id.VSub_DollarName '$OBJ') <'/'> ($ Id.VSub_DollarName '$t') <-key>} 
              {($ Id.VSub_DollarName '$OBJ') <'/'> ($ Id.VSub_DollarName '$t') <-key.pub>}
            )
          ]
        )
    )
  ]
)