diff --git a/dom0.sh b/dom0.sh
index 7247107..db78e71 100644
--- a/dom0.sh
+++ b/dom0.sh
@@ -13,5 +13,5 @@ qvm-service --enable work qubes-u2f-proxy
 echo "export export QT_QPA_PLATFORMTHEME=gtk2" | sudo tee /etc/environment
 
 #I am using the sys-usb VM for GPG here because I am using a PGP smartcard. You probably shouldn't do this if you store your GPG private key on disk. It **might** be safer to still have a dedicated gpg-backend VM for this, but then you will have to reassign the smartcard to the VM after every boot, which could be annoying.
-echo "emails sys-usb allow" >> /etc/qubes-rpc/policy/qubes.Gpg
+echo "emails  sys-usb allow" >> /etc/qubes-rpc/policy/qubes.Gpg
 echo "@anyvm  @anyvm  ask,default_target=sys-usb" >> /etc/qubes-rpc/policy/qubes.Gpg