OPTSTRING
while ((ch = getopt(argc, argv, OPTSTRING)) != -1) {
OPTSTRING(cert_principals);
OPTSTRING(force_command);
OPTSTRING(required_from_host_cert);
OPTSTRING(required_from_host_keys);