diff --git a/docs/getting-started/setup.md b/docs/getting-started/setup.md
index 136385e1..7443e2ee 100644
--- a/docs/getting-started/setup.md
+++ b/docs/getting-started/setup.md
@@ -144,9 +144,9 @@ forgotten one expires rather than lingering.
 
 A store bootstrapped by an earlier version has the policy, the auth method and
 the role, but no `secret/` engine — the controller's first credential write
-answers `no handler for route "secret/data/…"`. The bootstrap token cannot fix
-it either: the policy it was minted from names nothing under `sys/mounts`. Mount
-it once with the root token from `init`:
+answers `no handler for route "secret/data/…"`. The bootstrap token can't fix it
+either: the policy it was minted from names nothing under `sys/mounts`. Mount it
+once with the root token from `init`:
 
 ```bash
 sudo bash -c 'BAO_TOKEN="<root token>" bao secrets enable -path=secret kv-v2'