Suricata

Includes in our configuration file completely override the keys they override, in some cases it might be nice to just do the following in an include:

vars.address-groups.HOME_NET: "7.1.2.3/32" 

Note, in some cases this might already work as its available with the --set command line option, however, working like this in a configuration file is not official.

This is also very convenient in configuration files that are included.

This also seems to be common in YAML configurations in tools created in Go (filebeat, I think some docker tools). I'm not sure if this is an aspect the YAML parsers in Go, or just a common conventions in "cloud" apps. But still useful.