diff --git a/contact.php b/contact.php
index 8e3b84a..5ff241e 100644
--- a/contact.php
+++ b/contact.php
@@ -1,6 +1,7 @@
 <?php
 // Where GnuPG should store keys and other stuff.
-// This directory must be writable by the Apache/NGINX process
+// This directory must be writable by the Apache/NGINX process,
+// but remember to keep it outside of the webroot.
 putenv('GNUPGHOME=/home/apache/gnupg');
 
 // The recipient email and a subject line