don't `-h HOST`, but `-d domain`
(I'm not sure why I was putting stuff in CAPS)