diff --git a/tsa/doc/accounts.creole b/tsa/doc/accounts.creole
index 285faa0f381fcb00ceef77a2ad32729653778388..e536b9be94b0d97e522391766502aadccf35ae0b 100644
--- a/tsa/doc/accounts.creole
+++ b/tsa/doc/accounts.creole
@@ -74,7 +74,7 @@ password" to chpasswd@db.torproject.org. The phrase is required to prevent the
 daemon from triggering on arbitrary signed email. The best way to invoke this
 feature is with
 
-{{{echo "Please change my Debian password" | gpg --clearsign | mail chpasswd@db.torproject.org}}}
+{{{echo "Please change my Debian password" | gpg --armor --sign | mail chpasswd@db.torproject.org}}}
 
 After validating the request the daemon will generate a new random password,
 set it in the directory and respond with an encrypted message containing the
@@ -94,7 +94,7 @@ privileges; it is your LDAP password. The mail responder at
 {{{changes@db.torproject.org}}} will take you through a plausible, and perhaps
 enjoyable, series of puzzles, but BEWARE: THE CAKE IS A LIE.
 
-== <a id="key-rollover">Changing your PGP key</a> ==
+== <a id="key-rollover">Changing/Updating your PGP key</a> ==
 
 If you are planning on migrating to a new PGP key and you also want to
 change your key in LDAP, you need to create a ticket in