Ingest at most one argument in dx run --allow-ssh

Previously, "dx run --allow-ssh ..." would consume all subsequent
non-optionals, including potentially the executable. This allows
commands like "dx run --allow-ssh '*' bwa" to behave as expected (but
not "dx run --allow-ssh bwa").