auth docs: fix `direct-dnskey`

diff --git a/docs/settings.rst b/docs/settings.rst
index 6c6a77978510c7e4620793789ed308a5a8190cce..4d8e4db2d5bf6f29906cb7f7b9470e569e208c68 100644 (file)
--- a/docs/settings.rst
+++ b/docs/settings.rst
@@ -575,8 +575,12 @@ Configure a delay to send out notifications, no delay by default.
 -  Boolean
 -  Default: no
 
-Read additional DNSKEY, CDS and CDNSKEY records from the records table/your BIND zonefile. If not
-set, DNSKEY, CDS and CDNSKEY records in the zonefiles are ignored.
+Read additional DNSKEY records from the records table/your BIND zonefile and use both when
+preparing responses. If not set, such records in the zonefiles are ignored.
+
+When automatic CDS and CDNSKEY publication (see :ref:`metadata-publish-cdnskey-publish-cds`)
+is enabled, this also applies to those types. If not set, such records are only considered
+when automatic publication is turned off.
 
 .. _setting-direct-dnskey-signature: