From 981af1311105dec95d4247f1a00167eed6ed7a9f Mon Sep 17 00:00:00 2001
From: Dan Allan <dallan@bnl.gov>
Date: Tue, 31 Oct 2023 09:53:53 -0400
Subject: [PATCH] Document the CLI option.

---
 docs/source/explanations/security.md | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/docs/source/explanations/security.md b/docs/source/explanations/security.md
index 2e2bfcb30..df4fd0c29 100644
--- a/docs/source/explanations/security.md
+++ b/docs/source/explanations/security.md
@@ -35,8 +35,13 @@ client, a cookie will be set in your client and you won’t need to use the toke
 again. It is valid indefinitely.
 
 For horizontally-scaled deployments where you need multiple instances of the
-server to share the same secret, you can set it via an environment variable like
-so.
+server to share the same secret, you can set it with a CLI option
+
+```
+tiled serve ... --api-key=YOUR_SECRET
+```
+
+or via an environment variable
 
 ```
 TILED_SINGLE_USER_API_KEY=YOUR_SECRET tiled serve ...