diff --git a/docs/auth.html.in b/docs/auth.html.in
index 7340360..04b1210 100644
--- a/docs/auth.html.in
+++ b/docs/auth.html.in
@@ -77,11 +77,15 @@ while requiring <code>joe</code> to authenticate with the admin password,
 would require adding the following snippet to <code>PolicyKit.conf</code>.
 </p>
     <pre>
-  &lt;match action="org.libvirt.unix.manage" user="fred"&gt;
-    &lt;return result="yes"/&gt;
+  &lt;match action="org.libvirt.unix.manage"&gt;
+    &lt;match user="fred"&gt;
+      &lt;return result="yes"/&gt;
+    &lt;/match&gt;
   &lt;/match&gt;
-  &lt;match action="org.libvirt.unix.manage" user="joe"&gt;
-    &lt;return result="auth_admin"/&gt;
+  &lt;match action="org.libvirt.unix.manage"&gt;
+    &lt;match user="joe"&gt;
+      &lt;return result="auth_admin"/&gt;
+    &lt;/match&gt;
   &lt;/match&gt;
 </pre>
     <h3><a name="ACL_server_username">Username/password auth</a></h3>