diff --git a/e2e/devnet/gen-secrets.sh b/e2e/devnet/gen-secrets.sh
index 5f302e0..79d26c1 100755
--- a/e2e/devnet/gen-secrets.sh
+++ b/e2e/devnet/gen-secrets.sh
@@ -1,8 +1,7 @@
 #!/usr/bin/env bash
-# Generates fresh secrets into .env (gitignored). Re-run to rotate; existing
-# accounts on the PDS volume become unreachable if you rotate JWT_SECRET or
-# the PLC rotation key after accounts already exist, so only run this once
-# per devnet lifetime (delete the pds-data volume too if you do rotate).
+# Rotating JWT_SECRET or the PLC rotation key orphans every account already on
+# the PDS volume: run once per devnet lifetime, and delete pds-data if you do
+# rotate.
 set -euo pipefail
 cd "$(dirname "${BASH_SOURCE[0]}")"