The letsencryptclient (now renamed to certbot) runs `sudo apt-get install ...` even when running `--help`. I have a pull request that aims to fix that particular surprise: <a href="https:&#x2F;&#x2F;github.com&#x2F;certbot&#x2F;certbot&#x2F;pull&#x2F;2790" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;certbot&#x2F;certbot&#x2F;pull&#x2F;2790</a>