diff --git a/README.md b/README.md
index 92da264..78e6344 100644
--- a/README.md
+++ b/README.md
@@ -89,6 +89,19 @@ The options are as follows:
 > If a service is already enabled, it will be restarted each run of
 > **boxctl**.
 
+*$CWD/groups*
+
+> A ":" delimited list of groups to be added to the remote host.
+> Entries should follow a "group:gid" pattern.
+
+*$CWD/users*
+
+> A ":" delimited list of users to be added to thhe remote host.
+> Entries should follow the pattern: "user:uid:gid:comment:home:shell:password".
+> The "comment" filed should not contain white space for the time being.
+> "password" is expected to be an encrypted string produced via
+> encrypt(1).
+
 *$CWD/packages*
 
 > When this file exists,
@@ -112,6 +125,7 @@ The options are as follows:
 
 chmod(1),
 diff(1),
+encrypt(1),
 fw\_update(1),
 ksh(1),
 pkg\_add(1),
diff --git a/man/boxctl.8 b/man/boxctl.8
index 211a198..6135e6a 100644
--- a/man/boxctl.8
+++ b/man/boxctl.8
@@ -85,6 +85,15 @@ An optional file that contains a list of services to enable on the remote
 host.
 If a service is already enabled, it will be restarted each run of
 .Nm .
+.It Pa $CWD/groups
+A ":" delimited list of groups to be added to the remote host.
+Entries should follow a "group:gid" pattern.
+.It Pa $CWD/users
+A ":" delimited list of users to be added to thhe remote host.
+Entries should follow the pattern: "user:uid:gid:comment:home:shell:password".
+The "comment" filed should not contain white space for the time being.
+"password" is expected to be an encrypted string produced via
+.Xr encrypt 1 .
 .It Pa $CWD/packages
 When this file exists,
 .Nm
@@ -104,6 +113,7 @@ the run.
 .Sh SEE ALSO
 .Xr chmod 1 ,
 .Xr diff 1 ,
+.Xr encrypt 1 ,
 .Xr fw_update 1 ,
 .Xr ksh 1 ,
 .Xr pkg_add 1 ,