diff --git a/libexec/sourcezap/scripts/setup-user b/libexec/sourcezap/scripts/setup-user
index 00804ca..ba8d13e 100755
--- a/libexec/sourcezap/scripts/setup-user
+++ b/libexec/sourcezap/scripts/setup-user
@@ -21,7 +21,7 @@ else
        -n "${user}" \
        -c "sourcezap user" \
        -m \
-       -M $("${libexec}"/scripts/get-default-umask) \
+       -M "$("${libexec}"/scripts/get-default-umask)" \
        -s /sbin/nologin
     printok "${user} user created"
 fi