diff --git a/hshbase/oneshot/renew-openssh-keys.sls b/hshbase/oneshot/renew-openssh-keys.sls
index 8299eb12f7eb57fe3f3cb730a5510e4080f85e10..5e411a20d93f08217e453524dc4aea34f9bcf225 100644
--- a/hshbase/oneshot/renew-openssh-keys.sls
+++ b/hshbase/oneshot/renew-openssh-keys.sls
@@ -1,6 +1,6 @@
 hshbase_clear_old_ssh_host_keys:
   cmd.run:
-    - name: 'bash -c "rm -v /etc/ssh/ssh_host_*key*'
+    - name: 'bash -c "rm -v /etc/ssh/ssh_host_*key*"'
     - user: root
 
 hshbase_regenerate_ssh_host_keys: