diff --git a/lib/hx509/ks_dir.c b/lib/hx509/ks_dir.c
index ae5cad9e0..1d5751342 100644
--- a/lib/hx509/ks_dir.c
+++ b/lib/hx509/ks_dir.c
@@ -35,6 +35,14 @@
 RCSID("$Id$");
 #include <dirent.h>
 
+/*
+ * The DIR keyset module is strange compared to the other modules
+ * since it does lazy evaluation and really doesn't keep any local
+ * state except for the directory iteration and cert iteration of
+ * files. DIR ignores most errors so that the consumer doesn't get
+ * failes for stray files in directories.
+ */
+
 struct dircursor {
     DIR *dir;
     hx509_certs certs;