Bug 1088232 - mach ci-docker-run

flags defaults to an empty string, `for` won't blow up if iterating over an empty to the "if" check is really not needed I don't think.