diff --git a/doc/source/sysadmin.rst b/doc/source/sysadmin.rst
index 3ef02c8b1d..ea19f4fbd7 100644
--- a/doc/source/sysadmin.rst
+++ b/doc/source/sysadmin.rst
@@ -239,20 +239,18 @@ And then ``cat /root/.ssh/id_rsa.pub`` for use later.
 On the backup servers::
 
   # add bup user
-  sudo su -
   BUPUSER=bup-<short-servername>  # eg, bup-jenkins-dev
-  useradd -r $BUPUSER -s /bin/bash -d /opt/backups/$BUPUSER -m
-  exit
-
+  sudo useradd -r $BUPUSER -s /bin/bash -d /opt/backups/$BUPUSER -m
   sudo su - $BUPUSER
-  # should be in home directory /opt/backups/$BUPUSER
-  mkdir .ssh
-  cat >.ssh/authorized_keys
 
   # initalise bup
   bup init
 
-and add this to the authorized_keys file::
+  # should be in home directory /opt/backups/$BUPUSER
+  mkdir .ssh
+  cat >.ssh/authorized_keys
+
+write this into the authorized_keys file and end with ^D on a blank line::
 
   command="BUP_DEBUG=0 BUP_FORCE_TTY=3 bup server",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-pty <ssh key from earlier>