diff --git a/test/keycloak/README.md b/test/keycloak/README.md
index 89a3937e..b85d666c 100644
--- a/test/keycloak/README.md
+++ b/test/keycloak/README.md
@@ -4,3 +4,8 @@ Provided in this directory is a Dockerfile used for testing all OpenID related
 features. This Dockerfile, [irods-http-api-keycloak.Dockerfile](irods-http-api-keycloak.Dockerfile),
 depends on [example-realm-export.json](example-realm-export.json) to
 provide the realm used for testing.
+
+## Future Considerations
+
+Keycloak secret keys are only good for 10 years, I think.
+Be sure to update the secrets before then.