clarifying key rotation process

Author: khdownie

articles/storage/files/storage-files-identity-ad-ds-update-password.md

@@ -5,7 +5,7 @@ author: khdownie
 ms.service: storage
 ms.subservice: files
 ms.topic: how-to
-ms.date: 09/28/2022
+ms.date: 11/16/2022
 ms.author: kendownie
 ---
 
@@ -29,6 +29,8 @@ Update-AzStorageAccountADObjectPassword `
         -StorageAccountName "<your-storage-account-name-here>"
 ```
 
+This action will change the password for the AD object from kerb1 to kerb2. This is intended to be a two-stage process: rotate from kerb1 to kerb2 (kerb2 will be regenerated on the storage account before being set), wait several hours, and then rotate back to kerb1 (this cmdlet will likewise regenerate kerb1).
+
 ## Applies to
 | File share type | SMB | NFS |
 |-|:-:|:-:|