`su -c` not `sudo`, so the whole command needs to be passed as a single argument