diff --git a/config.go b/config.go
index 4ff0277..ad7e00a 100644
--- a/config.go
+++ b/config.go
@@ -123,14 +123,14 @@ type config struct {
 	RPCServer       string `short:"s" long:"rpcserver" description:"RPC server to connect to"`
 	WalletRPCServer string `short:"w" long:"walletrpcserver" description:"Wallet RPC server to connect to"`
 	RPCCert         string `short:"c" long:"rpccert" description:"RPC server certificate chain for validation"`
-	PrintJSON       bool   `short:"j" long:"json" description:"Print json messages sent and received"`
+	PrintJSON       bool   `short:"j" long:"json" description:"Print JSON messages sent and received"`
 	NoTLS           bool   `long:"notls" description:"Disable TLS"`
 	Proxy           string `long:"proxy" description:"Connect via SOCKS5 proxy (eg. 127.0.0.1:9050)"`
 	ProxyUser       string `long:"proxyuser" description:"Username for proxy server"`
 	ProxyPass       string `long:"proxypass" default-mask:"-" description:"Password for proxy server"`
 	TestNet         bool   `long:"testnet" description:"Connect to testnet"`
 	SimNet          bool   `long:"simnet" description:"Connect to the simulation test network"`
-	TLSSkipVerify   bool   `long:"skipverify" description:"Do not verify tls certificates (not recommended!)"`
+	TLSSkipVerify   bool   `long:"skipverify" description:"Do not verify TLS certificates (not recommended!)"`
 	Wallet          bool   `long:"wallet" description:"Connect to wallet"`
 
 	AuthType   string `long:"authtype" description:"The authorization type in use by the target server" choice:"basic" choice:"clientcert" default:"basic"`
diff --git a/sample-dcrctl.conf b/sample-dcrctl.conf
index f5bca75..e4ce8e8 100644
--- a/sample-dcrctl.conf
+++ b/sample-dcrctl.conf
@@ -34,3 +34,20 @@
 ; RPC server certificate chain file for validation
 ; rpccert=~/.dcrd/rpc.cert
 
+; Disable TLS
+; notls=1
+
+; Do not verify TLS certificates (not recommended!)
+; skipverify=1
+
+; Print JSON messages sent and received
+; json=1
+
+; The authorization type in use by the target server (basic or clientcert)
+; authtype=basic
+
+; Path to TLS certificate for client authentication
+; clientcert=~/.dcrctl/client.pem
+
+; Path to TLS client authentication key
+; clientkey=~/.dcrctl/client-key.pem