diff --git a/sudo-dom0.sh b/sudo-dom0.sh
index dca5b65..cb701b2 100644
--- a/sudo-dom0.sh
+++ b/sudo-dom0.sh
@@ -3,7 +3,7 @@ sudo mv /etc/authselect/custom/sudo-dom0-prompt/system-auth /etc/authselect/cust
 sudo cp /etc/authselect/system-auth /etc/authselect/custom/sudo-dom0-prompt
 
 sudo sed -i '/^auth/d' /etc/authselect/system-auth
-sudo sed -i '/^account/a\auth  [success=1 default=ignore]  pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAuth /bin/grep -q ^1$\nauth  requisite  pam_deny.so\nauth  required   pam_permit.so' /etc/authselect/system-auth
+sudo sed -i '/^account/b\auth  [success=1 default=ignore]  pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAuth /bin/grep -q ^1$\nauth  requisite  pam_deny.so\nauth  required   pam_permit.so' /etc/authselect/system-auth
 sudo authselect select custom/sudo-dom0-prompt
 
 sudo sed -i '/^%qubes/s/.*/user ALL=(ALL) ALL/' /etc/sudoers.d/qubes