diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 77c541b6cb0..575eb3be448 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -231,7 +231,7 @@ hostnossl database user
An IP address is specified in standard dotted decimal
notation with a CIDR> mask length. The mask
length indicates the number of high-order bits of the client
- IP address that must match. Bits to the right of this must
+ IP address that must match. Bits to the right of this should
be zero in the given IP address.
There must not be any white space between the IP address, the
/, and the CIDR mask length.