``configure --disable-auto-validation``, in which case the default is
``yes``.
-The keys specified in ``trust-anchors`` are copies of DNSKEY RRs for zones that are
-used to form the first link in the cryptographic chain of trust. Keys configured
-with the keyword ``static-key`` or ``static-ds`` are loaded directly into the
-table of trust anchors, and can only be changed by altering the
+The keys specified in ``trust-anchors`` are copies of ``DNSKEY`` RRs for zones
+that are used to form the first link in the cryptographic chain of trust. Keys
+configured with the keyword ``static-key`` or ``static-ds`` are loaded directly
+into the table of trust anchors, and can only be changed by altering the
configuration. Keys configured with ``initial-key`` or ``initial-ds`` are used
to initialize :rfc:`5011` trust anchor maintenance, and are kept up-to-date
automatically after the first time :iscman:`named` runs.