diff --git a/docs/swarm/credentials.md b/docs/swarm/credentials.md
index 61b89a4d..b0a5c89e 100644
--- a/docs/swarm/credentials.md
+++ b/docs/swarm/credentials.md
@@ -23,9 +23,9 @@ the only credential on disk.** Each has to be a file, and the reason is the
 whole asymmetry: the certificate is what authenticates a principal to the
 store, so it's the one credential that can't be fetched from the store.
 Something has to exist on disk before the first request, or there's nothing
-to make the request with. Every identity — an agent, a swarm-level service —
-needs one; a host running several holds several, and its only power is to
-ask the store for the rest.
+to make the request with. Every identity — an agent, a hive, a swarm-level
+service — needs one; a host running several holds several, and its only
+power is to ask the store for the rest.
 `swarm-bao.nix:529-533` states the rule for the nix option that carries it:
 this is _"the credential an operator places by hand"_, and _"a path, never a
 value."_ A literal in a nix expression lands in the nix store —