diff --git a/morph/grid/local/private-keys/README.rst b/morph/grid/local/private-keys/README.rst
index c243fd8e3a69c94eef41d7789f332f2815a7f283..684bf942a8010129f49cfcf79f5df1b60965ae45 100644
--- a/morph/grid/local/private-keys/README.rst
+++ b/morph/grid/local/private-keys/README.rst
@@ -12,6 +12,7 @@ deploy_key
 ----------
 
 This is an SSH private key which will be authorized to trigger a deployment update on the deployment hosts themselves.
+The corresponding SSH public key is kept in the ``public-keys`` location.
 
 grafana-admin.password
 ----------------------
@@ -22,6 +23,7 @@ stripe.secret
 -------------
 
 This is the Stripe secret key which the payment server uses to finalize payment processing using Stripe.
+The corresponding Stripe public key is kept in the ``public-keys`` location.
 
 ristretto.signing-key
 ---------------------
@@ -31,7 +33,8 @@ This is the Ristretto-group private key used by the ZKAP issuer.
 monitoringvpn
 -------------
 
-This directory holds Wireguard keys for each of the hosts so they can participate in the deployment VPN.
+This directory holds Wireguard private keys for each of the hosts so they can participate in the deployment VPN.
+The corresponding public keys are kept in the ``public-keys`` location.
 
 payments-localdev-ssl
 ---------------------