From 9ed007bdd24ad05a9a84fec70937b3da51b7c934 Mon Sep 17 00:00:00 2001
From: Nate Riffe <inkblot@movealong.org>
Date: Fri, 12 Jun 2015 19:30:05 -0500
Subject: [PATCH] Document the new `keyfile` property

---
 README.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index ea7a53d..25e20fa 100644
--- a/README.md
+++ b/README.md
@@ -135,7 +135,6 @@ zone transfers to servers matching an acl:
         zone_type       => 'master',
         domain          => 'example.com',
         allow_updates   => [ 'key local-update', ],
-        update_policies => [ 'grant test.example.net name example.net MX', ],
         allow_transfers => [ 'secondary-dns', ],
 	ns_notify       => true,
         dnssec          => true,
@@ -281,6 +280,9 @@ Defaults to: `answer`
 specifies the name of a TSIG key to be used to authenticate the update. The
 resource only uses a TSIG key if a `secret` is specified.
 
+`keyfile` specifies the name of a key file to use to sign requests. This
+parameter has no effect if a `secret` is specified.
+
 `hmac` defaults to "hmac-sha1" and need not be specified. This parameter
 specifies the algorithm of the TSIG key to be used to authenticate the update.
 The resource only uses a TSIG key if a `secret` is specified.