Use escapeshellarg for tinc here.