add documentation for masqueraded setup