diff --git a/README.md b/README.md
index 3c2b906..790c2c2 100644
--- a/README.md
+++ b/README.md
@@ -707,9 +707,10 @@ These are the password policy options that the openLDAP ppolicy.so module accept
  `pwdLockout` This must be set to TRUE for the pwdMaxFailure setting to take affect. If it is missing or set to FALSE, pwdMaxFailure is ignored.\
  `pwdLockoutDuration` How many seconds before an account that has been locked out will be automatically unlocked by the server. The default is 0.\
  `pwdMustChange` When this is set to TRUE and an administrator resets a user password, the user is forced to reset it themselves on the first login. The default is FALSE.\
+ `pwdPolicySubentry` How to set _which password policy_ to apply to an **overlay**. The value should be the DN of the applicable password policy entry.\
+ The default is the _olcPPolicyDefault_ attribute of the configuration entry used to apply the overlay. If _olcPPolicyDefault_ doesn’t exist and this attribute is missing, no policies will be enforced.
+ \
  
-
-
 ## _Show Organizational Units, users, and attributes_
 ### <ins>_Show LDAP server directories with the data_</ins>