--- orig/ipseckey.1m.txt	Mon Oct 30 18:00:08 2006
+++ new/ipseckey.1m.txt	Mon Oct 30 18:01:33 2006
@@ -950,10 +950,10 @@
      In the future ipseckey may be invoked under additional names
      as other security protocols become available to PF_KEY.
 
-     This command requires sys_net_config  privilege  to  operate
-     and  thus can run only in the global zone; security associa-
-     tions managed  by  ipseckey  can  protect  matching  network
-     traffic for any zone on the system.
+     This command requires sys_ip_config  privilege  to  operate
+     and  thus can run in the global zone and in exclusive-IP zones.
+     The global zone can set up security associations with ipseckey to
+     protect traffic for shared-IP zones on the system.