$ chmod 600 publicKeyFile privateKeyFile
 {endterm}
 
-The last command ensures that only you can read or write to those files.
+The last command ensures that no user other than you can read or write to those files.  (Like any other file on CHTC machines, these files will be readable by the CHTC administrative staff.  If that bothers you, contact us for alternatives.)
 
 To donwload a new pair of security tokens for =condor_annex= to use, go to the {link: https://console.aws.amazon.com/iam/home?region=us-east-1#/users IAM console}; log in if you need to.  The following instructions assume you are logged in as a user with the privilege to create new users.  (The 'root' user for any account has this privilege; other accounts may as well.)