diff --git a/installation.rst b/installation.rst
index 2d05bd9..269093b 100644
--- a/installation.rst
+++ b/installation.rst
@@ -35,6 +35,12 @@ Installation
     }
     EOF
 
+.. warning::
+
+   The authentic2 user is **SUPERUSER** because the authentic2
+   installation process uses it to create postgres extensions. This
+   privilege should be dropped if in production.
+
 3. Install::
 
     $ apt install authentic2