diff --git a/lib/krb5/krb5_get_credentials.3 b/lib/krb5/krb5_get_credentials.3
index 138f6c62c..9bbcb780e 100644
--- a/lib/krb5/krb5_get_credentials.3
+++ b/lib/krb5/krb5_get_credentials.3
@@ -1,4 +1,4 @@
-.\" Copyright (c) 2004 Kungliga Tekniska Högskolan
+.\" Copyright (c) 2004 - 2005 Kungliga Tekniska Högskolan
 .\" (Royal Institute of Technology, Stockholm, Sweden).
 .\" All rights reserved.
 .\"
@@ -93,7 +93,8 @@ Kerberos 5 Library (libkrb5, -lkrb5)
 .Fn krb5_get_credentials_with_flags
 get credentials by first looking in the
 .Fa ccache
-and then fetch the credential from the KDC using the krbtgt in
+and if doesn't exists or is expired, fetch the credential from the KDC
+using the krbtgt in
 .Fa ccache .
 Valid flags to pass into
 .Fa options
@@ -108,7 +109,10 @@ don't got out on network to fetch credential.
 request a user to user ticket.
 This options doesn't store the resulting user to user credential in
 the
-.Fa ccache.
+.Fa ccache .
+.It KRB5_GC_EXPIRED_OK
+returns the credential even if its expired, default behavior is trying
+to refetch the credential from the KDC.
 .El
 .Pp
 .Fa Flags