--- /dev/null
+Usage: cmstest [-q(uiet)] [-r(efblobs)] [-s signer1] [-S signer2] [-k keychain] [-a anchorFile]
+
+By default this test expects to see two identities, with email addresses of
+dmitch@apple.com and dmitch@dmitch.com, in a standard Identity search of the
+current user's default keychain search list. You can specify different
+Identities (by email address) and/or a specific keychain with the -s, -S,
+and -k options.
+
+Note: if you do specify alternate Identities, the identities you specify have
+to resolve to a known root cert with a total cert chain length of 3 (one for the
+leaf, one intermediate, one root).