much more responsible, bug-avoid-y implementation

the quotes capture the * and prevent shell wildcard shit from sabotaging the
find