diff --git a/doc/design/assistant/sshpassword.mdwn b/doc/design/assistant/sshpassword.mdwn
index 00c33ccf8b..c44259865b 100644
--- a/doc/design/assistant/sshpassword.mdwn
+++ b/doc/design/assistant/sshpassword.mdwn
@@ -13,7 +13,8 @@ can be pretty sure noone is sniffing the (localhost) connection.
 
 ## ssh-askpass approach
 
-* If ssh-askpass is in PATH, do nothing. (Unless webapp is run remotely.)
+* If ssh-askpass is in PATH, or `SSH_ASKPASS` is set, do nothing.
+  (Unless webapp is run remotely.)
 * Otherwise, have the assistant set `SSH_ASKPASS` to a command that will
   cause the webapp to read the password and forward it on. Also, set
   DISPLAY to ensure that ssh runs the program.