Rudder

Please handle this issue as a real BUG.

In which field do you want to insert that string ?

To be clearer, we need to better understand what you are trying to do exactly, what you would expect to get (in the generated file), and what you are actually getting.
That would help better understand the problem. Thanks for the help!

The usecase is to have options prepended to the authorized_keys, which include shell environment variables, like example:

from="host.fqdn",command="sudo $SSH_ORIGINAL_COMMAND" ssh-rsa.... 

example:

from="host.fqdn",command="sudo ${SSH_ORIGINAL_COMMAND}" ssh-rsa....

First result: somehow, regextract doesn't evaluate ${keyspec}, even if k${keyspec} can be read correctly, when it contains ${SSH_ORIGINAL_COMMAND}

Hard codding values in regextract doesn't solve the issue.
However, using $SSH_ORIGINAL_COMMAND (without {}) does work

We need to find a replacement for regextract to make the technique work