pub fn script(suffix: &str, port: u16) -> Result<String>
Build the script. The suffix is validated rather than escaped: it lands inside a JavaScript string literal, and a label is the only shape that cannot break out of one.