mention enable-in in p11-kit config.

diff --git a/doc/cha-tokens.texi b/doc/cha-tokens.texi
index eead0001d5975c6454ab9ac2bcac9643bb6b73cd..444927f95283d1fcdaaec1c4a5d515b57cff7f56 100644 (file)
--- a/doc/cha-tokens.texi
+++ b/doc/cha-tokens.texi
@@ -206,8 +206,13 @@ module: /usr/lib/opensc-pkcs11.so
 
 If you use this file, then there is no need for other initialization in
 @acronym{GnuTLS}, except for the PIN and token functions (see next section).  
-However, you may manually initialize the PKCS #11 subsystem if the default
-settings are not desirable.
+In several cases, however, it is desirable to limit badly behaving modules 
+(e.g., modules that add an unacceptable delay on initialization)
+to single applications. That can be done using the ``enable-in:'' option
+followed by the base name of applications that this module should be used.
+
+In all cases, you may also manually initialize the PKCS #11 subsystem if the 
+default settings are not desirable.
 
 @showfuncdesc{gnutls_pkcs11_init}