1 files changed, 19 insertions, 6 deletions

diff --git a/client/wallet.pod b/client/wallet.pod
index fd5749f..a330b0a 100644
--- a/client/wallet.pod
+++ b/client/wallet.pod
@@ -101,11 +101,11 @@ options and commands are ignored.
 =head1 COMMANDS
 
 As mentioned above, most commands are only available to wallet
-administrators.  The exceptions are C<get>, C<store>, C<show>, and
-C<destroy>.  All of those commands have their own ACLs, and if the
-appropriate ACL is set, it alone is checked to see if the user has access.
-Otherwise, C<get>, C<store>, and C<show> access is permitted if the user
-is authorized by the owner ACL of the object.
+administrators.  The exceptions are C<get>, C<store>, C<show>, C<destroy>,
+C<flag clear>, and C<flag set>.  All of those commands have their own
+ACLs, and if the appropriate ACL is set, it alone is checked to see if the
+user has access.  Otherwise, C<get>, C<store>, and C<show> access is
+permitted if the user is authorized by the owner ACL of the object.
 
 Administrators can run any command on any object or ACL except for C<get>
 and C<store>.  For C<get> and C<show>, they must still be authorized by
@@ -171,7 +171,20 @@ the object.
 
 Currently, the expiration of an object is not used.
 
-=item get <type> <output>
+=item flag clear <type> <name> <flag>
+
+Clears the flag <flag> on the object identified by <type> and <name>.
+
+=item flag set <type> <name> <flag>
+
+Sets the flag <flag> on the object identified by <type> and <name>.
+Recognized flags are C<locked>, which prevents all further actions on that
+object until the flag is cleared, and C<unchanging>, which tells the object
+backend to not generate new data on get but instead return the same data as
+previously returned.  The C<unchanging> flag is not meaningful for objects
+that do not generate new data on the fly.
+
+=item get <type> <name>
 
 Prints to standard output the data associated with the object identified
 by <type> and <name>, or stores it in a file if the B<-f> option was