diff --git a/swarm-nats-auth/src/main.rs b/swarm-nats-auth/src/main.rs
index 7ace129c..e84d4b21 100644
--- a/swarm-nats-auth/src/main.rs
+++ b/swarm-nats-auth/src/main.rs
@@ -14,8 +14,9 @@
 //! indistinguishable from the responder being down, and the queue is the
 //! swarm's control path.
 //!
-//! A request that arrives sealed to the callout xkey is opened with it, and
-//! its reply is sealed back to the server; see `xkey`. The `ensure-xkey` verb
+//! Every request is opened with the callout xkey, and its reply is sealed
+//! back to the server; see `xkey`. A request that does not open gets no
+//! reply: the server this answers always seals. The `ensure-xkey` verb
 //! creates that key in the secret store, and runs before the server does.
 //!
 //! # Secrets