diff --git a/kured-ds.yaml b/kured-ds.yaml
index 0dfb212..7527545 100644
--- a/kured-ds.yaml
+++ b/kured-ds.yaml
@@ -1,8 +1,8 @@
 apiVersion: extensions/v1beta1
 kind: DaemonSet
 metadata:
-  name: kured
-  namespace: kube-system
+  name: kured            # Must match `--ds-name`
+  namespace: kube-system # Must match `--ds-namespace`
 spec:
   template:
     metadata:
@@ -11,12 +11,12 @@ spec:
     spec:
       containers:
         - name: kured
-          image: weaveworks/kured
+          image: quay.io/weaveworks/kured
           imagePullPolicy: IfNotPresent
           command:
             - /usr/bin/kured
 #          args:
-#            - --alert-filter-regexp=^(BenignAlert|AnotherBenignAlert)$
+#            - --alert-filter-regexp=^RebootRequired$
 #            - --ds-name=kube-system
 #            - --ds-namespace=kured
 #            - --lock-annotation=weave.works/kured-node-lock
@@ -24,6 +24,9 @@ spec:
 #            - --prometheus-url=http://prometheus.monitoring.svc.cluster.local
 #            - --reboot-sentinel=/var/run/reboot-required
 #            - --slack-hook-url=https://hooks.slack.com/...
+#            - --slack-username=prod
+#
+# NO USER SERVICEABLE PARTS BEYOND THIS POINT
           env:
             # Pass in the name of the node on which this pod is scheduled
             # for use with drain/uncordon operations and lock acquisition
@@ -31,8 +34,6 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.nodeName
-          securityContext:
-            privileged: true
           volumeMounts:
             # Needed for two purposes:
             # * Testing for the existence of /var/run/reboot-required