handle empty for loops; support .ssh/config