diff --git a/etc/default/grub.d/40_cold_boot_attack_defense.cfg b/etc/default/grub.d/40_cold_boot_attack_defense.cfg
index a4a04eb..1729c14 100644
--- a/etc/default/grub.d/40_cold_boot_attack_defense.cfg
+++ b/etc/default/grub.d/40_cold_boot_attack_defense.cfg
@@ -6,6 +6,9 @@
 ## RAM wipe is enabled by default on host operating systems, real hardware.
 ## RAM wipe is disabled by in virtual machines (VMs).
 ##
+## Most users should not make any modifications to this config file because
+## there is no need for that.
+##
 ## User documentation:
 ## https://www.kicksecure.com/wiki/Cold_Boot_Attack_Defense
 ##