local APT_ARG="-q -q -o 'Dpkg::Options::=--force-confnew' install"
     local TAG
-    for TAG in $@; do
+    for TAG in "$@"; do
         prefixed_msg_no_nl "For tag '${TAG}', "
         local TEST
         TEST=$(echo "${TAG}" | cut -d':' -f1)
             printf 'checking if installed … '
             if dpkg-query -Wf '${Package}\n' | grep '^'"${PACKAGE}"'$' > /dev/null; then
                 echo 'yup, keeping!'
-                apt_digested ${APT_ARG} ${PACKAGE}
+                apt_digested "${APT_ARG}" "${PACKAGE}"
             else
                 echo 'nope, nothing to keep.'
             fi
             continue
         fi
         local PACKAGES
-        PACKAGES=$(cat "${PATH_APTMARK_TAG}" | sed -E 's/#.*//g' | sed -z 's/\n/ /g' | sed 's/  */ /g' | cut -c 2-)
+        PACKAGES=$(sed -E 's/#.*//g' < "${PATH_APTMARK_TAG}" | sed -z 's/\n/ /g' | sed 's/  */ /g' | cut -c 2-)
         if [ -z "${PACKAGES}" ]; then
             echo 'nothing to install.'
         else
             echo "ensuring installation of: ${PACKAGES}"
-            apt_digested ${APT_ARG} ${PACKAGES}
+            apt_digested "${APT_ARG}" "${PACKAGES}"
         fi
     done
     prefixed_msg_exit
 
 HOSTNAME="$3"
 FQDN="$4"
 if [ -f "${PATH_REL_DIR_APTMARK}/${HOSTING_APTMARK_TAG}" ]; then
-    INSTALL_TAGS="${INSTALL_TAGS} ${HOSTING_SERVICE}"
+    INSTALL_TAGS="${INSTALL_TAGS} ${HOSTING_APTMARK_TAG}"
 else
     abort 'Unrecognized hosting service.'
 fi