anchor.diff:    app_domains:
      - APP_DOMAIN
   	  </code></pre></td>
  -    <td>Replace <code>DOMAIN</code>, <code>SYSTEM_DOMAIN</code>, and <code>APP_DOMAIN</code> with the full domain you want associated with applications pushed to your Cloud Foundry installation. Example: "cloud-09.cf-app.com."
  +    <td>Replace <code>DOMAIN</code>, <code>SYSTEM_DOMAIN</code>, and <code>APP_DOMAIN</code> with the full domain you want associated with applications pushed to your Cloud Foundry installation. You must have already acquired these domains and configured some DNS records (for example, on Route53) so that these domains resolve to your load balancer (typically ELBs or HAProxys). Example: "cloud-09.cf-app.com."
       <br/><br/>
       If you used <code>bosh aws create</code>, this value comes from concatenating the <code>BOSH_VPC_SUBDOMAIN</code> and <code>BOSH_VPC_DOMAIN</code> values in the <code>bosh_environment</code> file.
       <br/><br/>
  
positive.code:       verification_key: JWT_VERIFICATION_KEY
        signing_key: JWT_SIGNING_KEY
      </code></pre></td>
      <td>Replace <code>JWT_SIGNING_KEY</code> with a PEM-encoded RSA private key, and <code>JWT_VERIFICATION_KEY</code> with the corresponding PEM-encoded RSA public key.<br/>
      Paste in the full keys, including the "BEGIN" and "END" delimiter lines.
      </td>
    </tr>
  
negative.code:     agent_key: CONSUL_AGENT_KEY
  	  </code></pre></td>
      <td>See the instructions on <a href="../common/consul-security.html">security configuration for consul</a>.
  	  </td>
    </tr>
    <tr>
  