diff --git a/docs/swarm/credentials.md b/docs/swarm/credentials.md
index b66670f4..e39bc973 100644
--- a/docs/swarm/credentials.md
+++ b/docs/swarm/credentials.md
@@ -24,7 +24,7 @@ certificate is what authenticates a principal to the store, so it's the one
 credential that can't be fetched from the store. Something has to exist on
 disk before the first request, or there's nothing to make the request with.
 Every host has one; its only power is to ask the store for the rest.
-`swarm-bao.nix:529-531` states the rule for the nix option that carries it:
+`swarm-bao.nix:529-533` states the rule for the nix option that carries it:
 this is _"the credential an operator places by hand"_, and _"a path, never a
 value."_ A literal in a nix expression lands in the nix store —
 world-readable and permanent — so that option takes a path to the