diff --git a/setup/so-functions b/setup/so-functions
index b383de6c9..3230d5e61 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -183,10 +183,10 @@ secrets_pillar(){
 	mkdir -p $local_salt_dir/pillar
 	printf '%s\n'\
 		"secrets:"\
-		"  mysql: $MYSQLPASS"\
-		"  playbook: $PLAYBOOKPASS"\
-		"  fleet: $FLEETPASS"\
-		"  fleet_jwt: $FLEETJWT"\
+		"  mysql: '$MYSQLPASS'"\
+		"  playbook: '$PLAYBOOKPASS'"\
+		"  fleet: '$FLEETPASS'"\
+		"  fleet_jwt: '$FLEETJWT'"\
 		"  fleet_enroll-secret: False" > $local_salt_dir/pillar/secrets.sls
   fi
 }