diff --git a/home/dot_ssh/run_onchanges_after_ensure-private-key.tmpl b/home/dot_ssh/run_onchanges_after_ensure-private-key.tmpl
index 5a0f8834..b561306e 100644
--- a/home/dot_ssh/run_onchanges_after_ensure-private-key.tmpl
+++ b/home/dot_ssh/run_onchanges_after_ensure-private-key.tmpl
@@ -6,5 +6,5 @@
 ### Ensure id_rsa is present and create one if it does not exist
 if [ ! -f "$HOME/.ssh/id_rsa" ]; then
   logg 'Generating missing default private key / public key (`~/.ssh/id_rsa`)'
-  ssh-keygen -b 4096 -t rsa -f "$HOME/.ssh/id_rsa" -q -N
+  ssh-keygen -b 4096 -t rsa -f "$HOME/.ssh/id_rsa" -q -N ""
 fi