diff --git a/sshtool b/sshtool
index 24c19af..eb4627a 100755
--- a/sshtool
+++ b/sshtool
@@ -34,13 +34,13 @@ SSH_CONFIG=cluster/$CLUSTER/ssh_config
 
 function header {
 	cat <<EOF
-export DEPLOYTOOL_ROOT_PASSWORD="$ROOT_PASS"
 cat > /tmp/deploytool_askpass <<EOG
 #!/usr/bin/env sh
-echo "\$DEPLOYTOOL_ROOT_PASSWORD"
+echo "\\\$DEPLOYTOOL_ROOT_PASSWORD"
 EOG
 chmod +x /tmp/deploytool_askpass
 export SUDO_ASKPASS=/tmp/deploytool_askpass
+export DEPLOYTOOL_ROOT_PASSWORD="$ROOT_PASS"
 sudo -A sh - <<'EOEVERYTHING'
 set -e
 EOF