.B -r
removes a file from the secstore.
.PP
-The server is
-.BR tcp!$auth!secstore ,
-or the server specified by option
-.BR -s .
+Option
+.B -s
+sets the dial string of the
+.IR secstore (8)
+server. The default is contained in the
+.BR $secstore
+environment variable. If the
+.B -s
+option is absent and
+.BR $secstore
+is empty,
+.IR secstore (1)
+will attempt to dial
+.BR tcp!$auth!secstore .
.PP
Option
.B -u
.SH SEE ALSO
.IR factotum (4),
.IR secstore (8)
+.SH DIAGNOSTICS
+Secstore sets error status on failure but will not print an error
+message when reading NVRAM or dialing the secstore server fails
+unless the
+.B -v
+flag is specified.
.SH BUGS
There is deliberately no backup of files on the secstore, so
.B -r