diff --git a/config/dnscrypt-proxy.toml b/config/dnscrypt-proxy.toml
index a40deac..bfbc0c6 100644
--- a/config/dnscrypt-proxy.toml
+++ b/config/dnscrypt-proxy.toml
@@ -656,7 +656,7 @@ fragments_blocked = ['cisco', 'cisco-ipv6', 'cisco-familyshield', 'cisco-familys
 # If you are not using the standard root CA, an optional "root_ca"
 # property set to the path to a root CRT file can be added to a server entry.
 
-# [doh_client_x509_auth]
+[doh_client_x509_auth]
 #
 # creds = [
 #    { server_name='myserver', client_cert='client.crt', client_key='client.key' }
@@ -731,7 +731,7 @@ skip_incompatible = true
 ## Do not enable unless you know what DNS64 is and why you need it, or else
 ## you won't be able to connect to anything at all.
 
-# [dns64]
+[dns64]
 
 ## (Option 1) Static prefix(es) as Pref64::/n CIDRs.
 # prefix = ["64:ff9b::/96"]