diff --git a/programs/server/users.xml b/programs/server/users.xml
index b33dc0628d1..5166b135e33 100644
--- a/programs/server/users.xml
+++ b/programs/server/users.xml
@@ -1,5 +1,7 @@
 <?xml version="1.0"?>
 <yandex>
+    <!-- See also the files in users.d directory where the settings can be overridden. -->
+
     <!-- Profiles of settings. -->
     <profiles>
         <!-- Default settings. -->
@@ -28,7 +30,9 @@
     <users>
         <!-- If user name was not specified, 'default' user is used. -->
         <default>
-            <!-- Password could be specified in plaintext or in SHA256 (in hex format).
+            <!-- See also the files in users.d directory where the password can be overridden.
+
+                 Password could be specified in plaintext or in SHA256 (in hex format).
 
                  If you want to specify password in plaintext (not recommended), place it in 'password' element.
                  Example: <password>qwerty</password>.
@@ -49,7 +53,7 @@
                   place 'kerberos' element instead of 'password' (and similar) elements.
                  The name part of the canonical principal name of the initiator must match the user name for authentication to succeed.
                  You can also place 'realm' element inside 'kerberos' element to further restrict authentication to only those requests
-                  whose initiator's realm matches it. 
+                  whose initiator's realm matches it.
                  Example: <kerberos />
                  Example: <kerberos><realm>EXAMPLE.COM</realm></kerberos>