My advice is not to try, because the blast radius of getting it wrong can be large, the most hazardous form being a quoted sudo bash -c on the other side. For

My advice is not to try, because the blast radius of getting it wrong can be large, the most hazardous form being a quoted sudo bash -c on the other side. For any one-liner of sufficient complexity such that the quoting matters, I’ll instead invoke the shell remotely and pipe command(s) to it over the transport of stdin. Special case: when data must be read from stdin, I’ll scp the line to a mktemp’d file and invoke that.