diff --git a/doc/sample.config b/doc/sample.config
index 40f655d7..1614d2e9 100644
--- a/doc/sample.config
+++ b/doc/sample.config
@@ -644,9 +644,12 @@ no-route = 192.168.5.0/255.255.255.0
 #
 # Other fields may be used by some of the CISCO clients.
 # This file must be accessible from inside the worker's chroot. 
-# Note that enabling this option is not recommended as it will allow
-# the worker processes to open arbitrary files (when isolate-workers is
-# set to true).
+# Note that:
+#  (1) enabling this option is not recommended as it will allow the
+#      worker processes to open arbitrary files (when isolate-workers is
+#      set to true).
+#  (2) This option cannot be set per-user or per-group; only the global
+#      version is being sent to client.
 #user-profile = profile.xml
 
 #