diff --git a/default.nix b/default.nix
index 02a702e..c6a380a 100644
--- a/default.nix
+++ b/default.nix
@@ -19,7 +19,7 @@ let
     brownpaper = sequoia-openpgp; # requires gmp as well
   };
   client = pkgs.writeShellScriptBin "brownpaper" ''
-    PATH=${pkgs.bash}/bin/:${pkgs.gnupg}/bin/:${pkgs.curl}/bin/:$PATH ${./bp.sh} $@
+    PATH=${pkgs.bash}/bin/:${pkgs.gnupg}/bin/:${pkgs.curl}/bin/:$PATH ${./bp.sh} "$@"
   '';
 in
 { server = (crate2nix_tools.generatedCargoNix { inherit name src; });  inherit client; }