We document them as explicitly required, `unwind -dnvf...' spits them
out like this and the last `force' example uses them as well.
OK?
Index: unwind.conf.5
===================================================================
RCS file: /cvs/src/sbin/unwind/unwind.conf.5,v
retrieving revision 1.30
diff -u -p -r1.30 unwind.conf.5
--- unwind.conf.5 31 Aug 2021 20:28:45 -0000 1.30
+++ unwind.conf.5 22 Oct 2021 14:28:37 -0000
@@ -150,8 +150,8 @@ block list "/etc/blocklist" log
.Pp
Define a DNS over TLS (DoT) forwarder and make it the preferred resolver:
.Bd -literal -offset indent
-forwarder 192.168.1.250 port 8080 authentication name "resolver.local" DoT
-preference DoT
+forwarder { 192.168.1.250 port 8080 authentication name "resolver.local" DoT }
+preference { DoT }
.Ed
.Pp
Where a domain requires a specific nameserver
