diff --git a/doc/guides/non-root-user.md b/doc/guides/non-root-user.md
index a593e95..69c811a 100644
--- a/doc/guides/non-root-user.md
+++ b/doc/guides/non-root-user.md
@@ -42,7 +42,7 @@ But it can be any user you want so long as it fits the requirements above.
 ```
 
 After this change, wire will prompt you for sudo authentication, and tell you
-the exact command wire wants privileged.
+the exact command wire wants privileged:
 
 ```sh{6}
 $ wire apply keys --on media
@@ -52,3 +52,21 @@ $ wire apply keys --on media
 me@node:22 | Authenticate for "sudo /nix/store/.../bin/key_agent":
 [sudo] password for deploy-user:
 ```
+
+## Using alternative privilege escalation
+
+You may change the privilege escalation command with the
+[deployment.privilegeEscalationCommand](/reference/module.html#deployment-privilegeescalationcommand)
+option.
+
+For example, doas:
+
+```nix
+{
+  deployment.privilegeEscalationCommand = [
+    "sudo" # [!code --]
+    "--" # [!code --]
+    "doas" # [!code ++]
+  ];
+}
+```
diff --git a/doc/index.md b/doc/index.md
index 06a7dae..0c323eb 100644
--- a/doc/index.md
+++ b/doc/index.md
@@ -5,7 +5,6 @@ layout: home
 hero:
   name: wire
   text: a tool to deploy nixos systems
-  # tagline: My great project tagline
   actions:
     - theme: brand
       text: Read Tutorial
@@ -20,11 +19,14 @@ hero:
 features:
   - title: Deploy in Parallel
     details: Build and deploy many nodes at once.
+    link: /guides/parallelism
     icon: 💽
   - title: Manage Secrets
     details: Fast & Unopinionated secret management. Bring your own GPG, Age, or any other encryption tool.
+    link: /guides/keys
     icon: 🔑
   - title: Deploy as Any User
     details: Non-root deployments and interactive authentication is fully supported.
+    link: /guides/non-root-user
     icon: 🧑‍💻
 ---