diff --git a/ChangeLog b/ChangeLog
index 228a532..bd6139e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,8 +1,14 @@
 changes since 1.7.2
+	New features:
+	- Rewrite: supplement attribute (add attribute if not present) (#19)
+
 	Misc:
 	- No longer require docbook2x tools, but include plain manpages
 	- Fail on startup if overlapping clients with different tls blocks
 
+	Bug fixes:
+	- Handle %00 in config correctly (#31)
+
 2018-09-03 1.7.2
 	Misc:
 	- Always copy proxy-state attributes in own responses
diff --git a/radsecproxy.conf.5 b/radsecproxy.conf.5
index 6ff97a9..15dc0d4 100644
--- a/radsecproxy.conf.5
+++ b/radsecproxy.conf.5
@@ -67,7 +67,7 @@ hexadecimal digits. If a % is used without two following hexadecimal digits, the
 % and the following characters are used as written. If you want to write a % and
 not use this decoding, you may of course write % in hex; i.e., %25. As %00 would
 terminate a string, this value is not converted in most cases, except when used
-with rewrite statements.
+with rewrite statements or secrets.
 
 Some options allow or require the use of regular expressions, denoted as
 \fIregex\fR. The POSIX extended RE system is used, see