rsync command generator — dry-run first, delete with a net

Most rsync generators assemble flags and wish you luck. This one dry-runs by default and refuses a bare --delete: the backup net makes every mirror reversible.