diff --git a/codex-rs/windows-sandbox-rs/src/bin/setup_main/win.rs b/codex-rs/windows-sandbox-rs/src/bin/setup_main/win.rs
index 1f93d0a5ee..f0475bc39f 100644
--- a/codex-rs/windows-sandbox-rs/src/bin/setup_main/win.rs
+++ b/codex-rs/windows-sandbox-rs/src/bin/setup_main/win.rs
@@ -1034,7 +1034,7 @@ mod tests {
         let deny_sids = workspace_write_cap_sids_for_path(
             &codex_home,
             &workspace,
-            &[workspace.clone(), active_root.clone()],
+            &[workspace.clone(), active_root],
             &deny_path,
         )
         .expect("deny sids");
@@ -1070,7 +1070,7 @@ mod tests {
         let deny_sids = workspace_write_cap_sids_for_path(
             &codex_home,
             &workspace,
-            &[workspace.clone(), active_root.clone()],
+            &[workspace.clone(), active_root],
             &deny_path,
         )
         .expect("deny sids");