diff --git a/admin-guide/puppet/profiles/ssh_client.rst b/admin-guide/puppet/profiles/ssh_client.rst
index 53803f9c..72d3bd90 100644
--- a/admin-guide/puppet/profiles/ssh_client.rst
+++ b/admin-guide/puppet/profiles/ssh_client.rst
@@ -12,19 +12,12 @@ Parameters
 ======================  ========  =============================================
 **Name**                **Type**  **Default**
 ----------------------  --------  ---------------------------------------------
-allowed_hosts           string    '\*.psi.ch'
-canonicalize_hostname   bool      false
-forward_x11             bool
+canonicalize_hostname   bool      hiera('ssh_client::canonicalize_hostname')
+forward_x11             bool      hiera('ssh_client::forward_x11')
+try_host_trust          bool      hiera('ssh_client::try_host_trust', false)
 ======================  ========  =============================================
 
 
-``allowed_hosts``
-~~~~~~~~~~~~~~~~~
-
-A string specifying which hosts are allowed to SSH to this machine. By default,
-all PSI hosts will be able to connect.
-
-
 ``canonicalize_hostname``
 ~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -36,3 +29,9 @@ Determines whether or not hostnames are canonicalized for ``psi.ch``. See
 ~~~~~~~~~~~~~~
 
 Determines whether ``ForwardX11`` and ``ForwardX11Trusted`` should be enabled.
+
+
+``try_host_trust``
+~~~~~~~~~~~~~~~~~
+
+Determines whether the ssh client attemps to authenticate using `HostbasedAuthentication``