</varlistentry>
<varlistentry>
<term><varname>composefs.enabled</varname></term>
- <listitem><para>This can be <literal>yes</literal>, <literal>no</literal>. <literal>maybe</literal> or
- <literal>signed</literal>. The default is <literal>maybe</literal>. If set to <literal>yes</literal> or
+ <listitem><para>This can be <literal>yes</literal>, <literal>no</literal>, <literal>maybe</literal>,
+ or <literal>signed</literal>. The default is <literal>no</literal>. If set to <literal>yes</literal> or
<literal>signed</literal>, then composefs is always used, and the boot fails if it is not
available. Additionally if set to <literal>signed</literal>, boot will fail if the image cannot be
- validated by a public key. If set to <literal>maybe</literal>, then composefs is used if supported.
+ validated by a public key. Setting this to <literal>maybe</literal> is currently equivalent to <literal>no</literal>.
</para></listitem>
</varlistentry>
<varlistentry>