charon ssh-for-each: Support --include / --exclude