updated docs for 'direct-dnskey-signature'

diff --git a/docs/settings.rst b/docs/settings.rst
index 66e242d59c155b2886de2b867f628dc88489dbab..97edfd14cc3569ecdacaea87a8a2af92b9f8508f 100644 (file)
--- a/docs/settings.rst
+++ b/docs/settings.rst
@@ -580,8 +580,9 @@ set, DNSKEY, CDS and CDNSKEY records in the zonefiles are ignored.
 -  Boolean
 -  Default: no
 
-Read signatures of DNSKEY records directly from the backend. If not set and the record is not presigned, 
-DNSKEY records will be signed directly by PDNS Authoritative.
+Read signatures of DNSKEY records directly from the backend. 
+If not set and the record is not presigned, DNSKEY records will be signed directly by PDNS Authoritative.
+Please only use this if you are sure that you need it.
 
 .. _setting-disable-axfr: