diff --git a/source4/auth/kerberos/kerberos_util.c b/source4/auth/kerberos/kerberos_util.c
index de9f2c38655..ba8d822f638 100644
--- a/source4/auth/kerberos/kerberos_util.c
+++ b/source4/auth/kerberos/kerberos_util.c
@@ -358,9 +358,9 @@ done:
 	{
 		bool require_fast;
 		/*
-		 * This ensures that if FAST was required, that we proceed
-		 * with no credentials cache, but with (eg) anonymous
-		 * PKINIT
+		 * This ensures that if FAST was required, but no armor
+		 * credentials cache was specified, we proceed with (eg)
+		 * anonymous PKINIT
 		 */
 		require_fast = cli_credentials_get_krb5_require_fast_armor(credentials);
 		if (require_fast) {