<% if sshGroups %> ssh_restricted_groups = <%= sshGroups %> <% else %> ssh_restricted_groups = MyDefault <% end %>