diff --git a/confluent_osdeploy/el7/profiles/default/syncfiles b/confluent_osdeploy/el7/profiles/default/syncfiles
index 0f7d6e4e..9e0dbc56 100644
--- a/confluent_osdeploy/el7/profiles/default/syncfiles
+++ b/confluent_osdeploy/el7/profiles/default/syncfiles
@@ -1,5 +1,13 @@
+# It is advised to avoid /var/lib/confluent/public as a source for syncing.  /var/lib/confluent/public
+# is served without authentication and thus any sensitive content would be a risk. If wanting to host
+# syncfiles on a common share, it is suggested to have /var/lib/confluent be the share and use some other
+# subdirectory other than public.
+#
+# Syncing is performed as the 'confluent' user, so all source files must be accessible by the confluent user.
+#
 # This file lists files to synchronize or merge to the deployed systems from the deployment server
-# To specify taking /some/path/hosts on the deploymennt server and duplicating it to /etc/hosts:
+# To specify taking /some/path/hosts on the deployment server and duplicating it to /etc/hosts:
+# Note particularly the use of '->' to delineate source from target.
 # /some/path/hosts -> /etc/hosts
 
 # If wanting to simply use the same path for source and destinaiton, the -> may be skipped:
diff --git a/confluent_osdeploy/el8-diskless/profiles/default/syncfiles b/confluent_osdeploy/el8-diskless/profiles/default/syncfiles
index 0f7d6e4e..9e0dbc56 100644
--- a/confluent_osdeploy/el8-diskless/profiles/default/syncfiles
+++ b/confluent_osdeploy/el8-diskless/profiles/default/syncfiles
@@ -1,5 +1,13 @@
+# It is advised to avoid /var/lib/confluent/public as a source for syncing.  /var/lib/confluent/public
+# is served without authentication and thus any sensitive content would be a risk. If wanting to host
+# syncfiles on a common share, it is suggested to have /var/lib/confluent be the share and use some other
+# subdirectory other than public.
+#
+# Syncing is performed as the 'confluent' user, so all source files must be accessible by the confluent user.
+#
 # This file lists files to synchronize or merge to the deployed systems from the deployment server
-# To specify taking /some/path/hosts on the deploymennt server and duplicating it to /etc/hosts:
+# To specify taking /some/path/hosts on the deployment server and duplicating it to /etc/hosts:
+# Note particularly the use of '->' to delineate source from target.
 # /some/path/hosts -> /etc/hosts
 
 # If wanting to simply use the same path for source and destinaiton, the -> may be skipped:
diff --git a/confluent_osdeploy/el8/profiles/default/syncfiles b/confluent_osdeploy/el8/profiles/default/syncfiles
index 0f7d6e4e..9e0dbc56 100644
--- a/confluent_osdeploy/el8/profiles/default/syncfiles
+++ b/confluent_osdeploy/el8/profiles/default/syncfiles
@@ -1,5 +1,13 @@
+# It is advised to avoid /var/lib/confluent/public as a source for syncing.  /var/lib/confluent/public
+# is served without authentication and thus any sensitive content would be a risk. If wanting to host
+# syncfiles on a common share, it is suggested to have /var/lib/confluent be the share and use some other
+# subdirectory other than public.
+#
+# Syncing is performed as the 'confluent' user, so all source files must be accessible by the confluent user.
+#
 # This file lists files to synchronize or merge to the deployed systems from the deployment server
-# To specify taking /some/path/hosts on the deploymennt server and duplicating it to /etc/hosts:
+# To specify taking /some/path/hosts on the deployment server and duplicating it to /etc/hosts:
+# Note particularly the use of '->' to delineate source from target.
 # /some/path/hosts -> /etc/hosts
 
 # If wanting to simply use the same path for source and destinaiton, the -> may be skipped: