cli: add a flag to force the scan using a given protocol