diff --git a/docs/security/hadoop_credentials_manager.md b/docs/security/hadoop_credentials_manager.md
index 6bc6be610e5..856a3500b7a 100644
--- a/docs/security/hadoop_credentials_manager.md
+++ b/docs/security/hadoop_credentials_manager.md
@@ -83,8 +83,8 @@ The necessary configurations for hdfs and hive to obtain delegation token are as
Key | Meaning | value
--- | --- | ---
-
hadoop.security.authentication
|Set the authentication for the cluster
|kerberos
-hive.metastore.uris
|URI for client to contact metastore server
|thrift://{metastoreHost}:{metastorePort}}
-hive.metastore.sasl.enabled
|If true, the metastore thrift interface will be secured with SASL.Clients must authenticate with Kerberos.
|true
-hive.metastore.kerberos.principal
|The service principal for the metastore thrift server. The special string _HOST will be replaced automatically with the correct host name.
|for example hive/_HOST@${realm}
-hive.metastore.kerberos.keytab.file
|The path to the Kerberos Keytab file containing the metastore thrift server's service principal.
|for example /etc/security/keytabs/hive.service.keytab
\ No newline at end of file
+hadoop\.security
\.authentication|Set the authentication for the cluster
|kerberos
+hive\.metastore
\.uris|URI for client to contact metastore server
|thrift://{metastoreHost}:{metastorePort}}
+hive\.metastore
\.sasl\.enabled|If true, the metastore thrift interface will be secured with SASL.Clients must authenticate with Kerberos.
|true
+hive\.metastore
\.kerberos\.principal|The service principal for the metastore thrift server. The special string _HOST will be replaced automatically with the correct host name.
|for example hive/_HOST@${realm}
+hive\.metastore
\.kerberos\.keytab\.file|The path to the Kerberos Keytab file containing the metastore thrift server's service principal.
|for example /etc/security/keytabs/hive.service.keytab