Fix documentation of armor cache based on fast negotiation project

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23579 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/clients/kinit/kinit.M b/src/clients/kinit/kinit.M
index 5b85772ac26be43b3f8b3f0dd42b6d287c456b8e..f50ca3ac316b03ef1df4d97291f4466f4f1fe3d1 100644 (file)
--- a/src/clients/kinit/kinit.M
+++ b/src/clients/kinit/kinit.M
@@ -140,9 +140,11 @@ option; otherwise the default name and location will be used.
 .TP
 \fB\-T\fP \fIarmor_ccache\fP
 Specifies the name of a credential cache that already contains a
-ticket.  This ccache will be used to armor the request.  Ideally, an
-attacker should have to attack both the armor ticket and the key of
-the principal.
+ticket.  If supported by the KDC, This ccache will be used to armor
+the request so that an attacker would have to know both the key of the
+armor ticket and the key of the principal used for authentication in
+order to attack the request. Armoring also makes sure that the
+response from the KDC is not modified in transit.
 .TP
 \fB\-c\fP \fIcache_name\fP
 use