diff --git a/readme.md b/readme.md
index 0e42d56..8c039e8 100644
--- a/readme.md
+++ b/readme.md
@@ -62,14 +62,16 @@ kubectl create secret generic sops-age \
 Update the encryption with `sops updatekeys`, then delete age.agekey.
 
 TODO - This doesn't appear to work as expected, need to do:
-  - `sops -d -i apps/gluetun/secret.yaml`
-  - `sops -e -i apps/gluetun/secret.yaml`
+  - `sops updatekeys -y apps/gluetun/secret.yaml`
+
+This should work but is untested (in fish)  
+`for file in $(grep -lr "sops:"); sops updatekeys -y $file; end`
 
 ### Using sops
 
 #### Encrypting
 
-After creating a new secret, run `sops encrypt --in-place ./path/to/secret.yaml`.
+After creating a new secret, run `sops -e -i ./path/to/secret.yaml`.
 
 #### Editing