diff -u b/sites/default/default.settings.php b/sites/default/default.settings.php
--- b/sites/default/default.settings.php
+++ b/sites/default/default.settings.php
@@ -231,8 +231,7 @@
  *
  * The default location for the "sync" directory is inside a randomly-named
  * directory in the public files path. The setting below allows you to override
- * the "sync" location. To enhance security, you can declare a path that is
- * outside your document root.
+ * the "sync" location. 
  *
  * If you use files for the "active" configuration, you can tell the
  * Configuration system where this directory is located by adding an entry with
@@ -585,7 +584,8 @@
  * configuration, do the following prior to installing:
  * - Create an "active" directory and declare its path in $config_directories
  *   as explained under the 'Location of the site configuration files' section
- *   above in this file.
+ *   above in this file. To enhance security, you can declare a path that is
+ *   outside your document root.
  * - Override the 'bootstrap_config_storage' setting here. It must be set to a
  *   callable that returns an object that implements
  *   \Drupal\Core\Config\StorageInterface.