Function tls_line 

pub(crate) fn tls_line(
    domain: &str,
    user: &str,
    port: u16,
    dry_run: bool,
) -> String

The sudo line choir host asks for, spelled out.