ref-filter: implement '--contains' option