--- a/doc/manual.docbook	Thu Oct 15 10:57:25 2009 +0100
+++ b/doc/manual.docbook	Thu Oct 15 11:00:32 2009 +0100
@@ -365,9 +365,10 @@
 Each SSH key that has access to the repository has an entry in
 <filename>~hg/.ssh/authorized_keys</filename>; this is how the SSH daemon
 knows to give that key access. When the user connects over SSH, their
-commands are run in a specially crafted restricted shell; this shell knows
-which key was used to connect, determines what the user is trying to do,
-and checks the access rules to decide whether to allow it.  
+commands are run in a custom restricted shell; this shell knows which key
+was used to connect, determines what the user is trying to do, checks the
+access rules to decide whether to allow it, and if allowed invokes
+Mercurial internally, without forking.
 </para>
 <para>
 This restricted shell also ensures that certain Mercurial extensions are