for-each-ref: add '--contains' option