diff --git a/client-api/pvc-api.sample.yaml b/client-api/pvc-api.sample.yaml
index d9bee650..c9affe59 100644
--- a/client-api/pvc-api.sample.yaml
+++ b/client-api/pvc-api.sample.yaml
@@ -19,6 +19,8 @@ pvc:
         listen_address: "127.0.0.1"
         # listen_port: TCP port to listen on, usually 7370
         listen_port: "7370"
+        # secret_key: Per-cluster secret key for API cookies; generate with uuidgen or pwgen
+        secret_key: ""
         # authentication: Authentication and security settings
         authentication:
             # tokens: a list of authentication tokens; leave as an empty list to disable authentication
@@ -27,8 +29,6 @@ pvc:
                 - description: "testing"
                   # token: random token for authentication; generate with uuidgen or pwgen
                   token: ""
-        # secret_key: Per-cluster secret key for API cookies; generate with uuidgen or pwgen
-        secret_key: ""
         # ssl: SSL configuration
         ssl:
             # Enabled or disable SSL operation