diff --git a/management/dns_update.py b/management/dns_update.py
index d6f93e55..d72fbe1c 100755
--- a/management/dns_update.py
+++ b/management/dns_update.py
@@ -716,9 +716,9 @@ def sign_zone(domain, zonefile, env):
 
 		# zonefile to sign
 		"/etc/nsd/zones/" + zonefile,
-	]
 		# keys to sign with (order doesn't matter -- it'll figure it out)
-		+ all_keys
+		*all_keys
+	]
 	)
 
 	# Create a DS record based on the patched-up key files. The DS record is specific to the