diff --git a/keydb.conf b/keydb.conf
index 247bcb9ad..677303f86 100644
--- a/keydb.conf
+++ b/keydb.conf
@@ -257,6 +257,11 @@ tcp-keepalive 300
 #
 # tls-session-cache-timeout 60
 
+# Allow the server to monitor the filesystem and rotate out TLS certificates if 
+# they change on disk, defaults to no.
+# 
+# tls-rotation no
+
 ################################# GENERAL #####################################
 
 # By default KeyDB does not run as a daemon. Use 'yes' if you need it.