diff --git a/README.md b/README.md
index 4947714fc..a90bfef9e 100644
--- a/README.md
+++ b/README.md
@@ -133,7 +133,11 @@ repos:
     note: "A private repo"
 
 # Authorized users. Admins have full access to all repos. Regular users
-# can read all repos and push to their collab-repos.
+# can read public repos and push to their collab-repos.
+
+# Authorized users. Admins have full access to all repos. Private repos are only
+# accessible by admins and collab users. Regular users can read public repos
+# based on your anon-access setting.
 users:
   - name: Beatrice
     admin: true
diff --git a/config/defaults.go b/config/defaults.go
index 295c93487..a471fab58 100644
--- a/config/defaults.go
+++ b/config/defaults.go
@@ -30,8 +30,9 @@ repos:
 
 const hasKeyUserConfig = `
 
-# Authorized users. Admins have full access to all repos. Users can read all
-# repos and push to their collab-repos.
+# Authorized users. Admins have full access to all repos. Private repos are only
+# accessible by admins and collab users. Regular users can read public repos
+# based on your anon-access setting.
 users:
   - name: Admin
     admin: true