Add a note about salt length

Apparently it is confusing that you don't specify a specific salt,
but a salt length.

diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst
index ba41d40f7550674ff4cb4e35df484ff1f65e0ef8..725800dfcf9d4298125ea51be498ca1d45cc6b19 100644 (file)
--- a/doc/arm/reference.rst
+++ b/doc/arm/reference.rst
@@ -5163,7 +5163,9 @@ The following options can be specified in a ``dnssec-policy`` statement:
 
     The default is to use NSEC.  The ``iterations``, ``optout`` and
     ``salt-length`` parts are optional, but if not set, the values in
-    the example above are the default NSEC3 parameters.
+    the example above are the default NSEC3 parameters. Note that you don't
+    specify a specific salt string, ``named`` will create a salt for you
+    of the provided salt length.
 
   ``zone-propagation-delay``
     This is the expected propagation delay from the time when a zone is