diff --git a/internal/credential/rotate.go b/internal/credential/rotate.go
index 29a22d5..c83158e 100644
--- a/internal/credential/rotate.go
+++ b/internal/credential/rotate.go
@@ -53,6 +53,8 @@ type ServiceAccountPrivateKey struct {
 	ClientX509CertURL       string `json:"client_x509_cert_url"`
 }
 
+// ValidateCredsCallback is called to validate the credentials after rotating the service account key.
+// The callback should return an error if the credentials are invalid.
 type ValidateCredsCallback func(*Config, ...option.ClientOption) error
 
 // RotateServiceAccountKey takes the private key from this credentials config