Check "socket" scanner commandline spec for no more than one %s expansion