Option to purge old authorized keys
diff --git a/README.rst b/README.rst
index 747c2c4..eab4d06 100644
--- a/README.rst
+++ b/README.rst
@@ -58,7 +58,9 @@
           address: 0.0.0.0
           port: 22
 
-OpenSSH server with auth keys for users
+OpenSSH server with auth keys for users.
+Parameter ``purge`` will ensure exact authorized_keys contents co undefined
+keys will be removed.
 
 .. code-block:: yaml
 
@@ -77,6 +79,7 @@
             - ${public_keys:newt}
           root:
             enabled: true
+            purge: true
             user: ${linux:system:user:root}
             public_keys:
             - ${public_keys:newt}