diff --git a/docs/security.html b/docs/security.html
index 28c506c7c0e..599a47a6dd7 100644
--- a/docs/security.html
+++ b/docs/security.html
@@ -1134,6 +1134,18 @@
             <td></td>
             <td>ResourcePattern</td>
         </tr>
+        <tr>
+            <td>--transactional-id [transactional-id]</td>
+            <td>The transactionalId to which ACLs should be added or removed. A value of * indicates the ACLs should apply to all transactionalIds.</td>
+            <td></td>
+            <td>ResourcePattern</td>
+        </tr>
+        <tr>
+            <td>--delegation-token [delegation-token]</td>
+            <td>Delegation token to which ACLs should be added or removed. A value of * indicates ACL should apply to all tokens.</td>
+            <td></td>
+            <td>ResourcePattern</td>
+        </tr>
         <tr>
             <td>--resource-pattern-type [pattern-type]</td>
             <td>Indicates to the script the type of resource pattern, (for --add), or resource pattern filter, (for --list and --remove), the user wishes to use.<br>
@@ -1179,7 +1191,21 @@
         <tr>
             <td>--operation</td>
             <td>Operation that will be allowed or denied.<br>
-                Valid values are : Read, Write, Create, Delete, Alter, Describe, ClusterAction, All</td>
+                Valid values are:
+                <ul>
+                    <li>Read</li>
+                    <li>Write</li>
+                    <li>Create</li>
+                    <li>Delete</li>
+                    <li>Alter</li>
+                    <li>Describe</li>
+                    <li>ClusterAction</li>
+                    <li>DescribeConfigs</li>
+                    <li>AlterConfigs</li>
+                    <li>IdempotentWrite</li>
+                    <li>All</li>
+                </ul>
+            </td>
             <td>All</td>
             <td>Operation</td>
         </tr>
@@ -1197,6 +1223,14 @@
             <td></td>
             <td>Convenience</td>
         </tr>
+        <tr>
+            <td>--idempotent</td>
+            <td>Enable idempotence for the producer. This should be used in combination with the --producer option.<br>
+                Note that idempotence is enabled automatically if the producer is authorized to a particular transactional-id.
+            </td>
+            <td></td>
+            <td>Convenience</td>
+        </tr>
         <tr>
             <td>--force</td>
             <td> Convenience option to assume yes to all queries and do not prompt.</td>