diff --git a/changes/bug2385 b/changes/bug2385
index e7151f49eb..5d571d910f 100644
--- a/changes/bug2385
+++ b/changes/bug2385
@@ -1,5 +1,9 @@
- o Minor bugfixes:
-   - Clear keys and key-derived material left on the stack in rendservice.c
-     and rendclient.c
+ o Minor features (security):
+   - Clear keys and key-derived material left on the stack in
+     rendservice.c and rendclient.c. This should make us more
+     forward-secure against cold-boot attacks and the like. Fix for
+     bug 2385.
+
    - Check return value of crypto_pk_write_private_key_to_string() in
-     end_service_load_keys()
+     end_service_load_keys(). This should make us more forward-secure
+     against cold-boot attacks and the like. Fix for bug 2385.