This looks good, except we should avoid the -i option, which is a generic flag interpreted by the common code for some daemons (it identifies the ID portion of client.ID that we authenticate with).