diff --git a/sudo-dom0.sh b/sudo-dom0.sh
index d018d4d..ec263e8 100644
--- a/sudo-dom0.sh
+++ b/sudo-dom0.sh
@@ -4,7 +4,7 @@ sudo cp /etc/authselect/system-auth /etc/authselect/custom/sudo-dom0-prompt
 
 sudo sed -i '/^auth/d'  /etc/authselect/custom/sudo-dom0-prompt/system-auth
 
-sed -i '/^account/ i auth  [success=1 default=ignore]  pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$\nauth  requisite  pam_deny.so\nauth  required   pam_permit.so' /etc/authselect/custom/sudo-dom0-prompt/system-auth
+sed -i '/^account/ i auth        [success=1 default=ignore]                   pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$\nauth        requisite                                    pam_deny.so\nauth        required                                     pam_permit.so'   /etc/authselect/custom/sudo-dom0-prompt/system-auth
 
 sudo authselect select custom/sudo-dom0-prompt
 
diff --git a/sus b/sus
index 2adc653..3f70fb7 100644
--- a/sus
+++ b/sus
@@ -4,9 +4,9 @@
 # See authselect(8) for more details.
 
 
-auth  [success=1 default=ignore]  pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$
-auth  requisite  pam_deny.so
-auth  required   pam_permit.so
+auth        [success=1 default=ignore]                   pam_exec.so seteuid /usr/lib/qubes/qrexec-client-vm dom0 qubes.VMAAuth /bin/grep -q ^1$
+auth        requisite                                    pam_deny.so
+auth        required                                     pam_permit.so
 account     required                                     pam_unix.so
 
 password    requisite                                    pam_pwquality.so