howto/gitlab.md

@@ -2107,6 +2107,10 @@ manager, under
 `misc/git@gitlab.torproject.org-revocation-cert.gpg`. The key is
 published in WKD directly on the GitLab server.
 
+The `account-keyring` repository is checked out with a project-level
+access token with the Reporter role and `read_repository` access. It
+is stored in Trocla and configured through Git's credentials system.
+
 ## Issues
 
 [File][] or [search][] for issues in the [gitlab project][search].