diff --git a/doc/ref/clientacl.rst b/doc/ref/clientacl.rst
index f4b0ade696..331881deee 100644
--- a/doc/ref/clientacl.rst
+++ b/doc/ref/clientacl.rst
@@ -17,9 +17,9 @@ specified user. This configuration is much like the ``peer`` configuration:
       # Allow thatch to execute anything.
       thatch:
         - .*
-      # Allow fred to use ping and pkg, but only on "web*" minions.
+      # Allow fred to use test and pkg, but only on "web*" minions.
       fred:
-        - web*
+        - web*:
           - test.*
           - pkg.*