diff --git a/cli/config/configuration-acrn.toml.in b/cli/config/configuration-acrn.toml.in
index 3064285a71..efaa0213be 100644
--- a/cli/config/configuration-acrn.toml.in
+++ b/cli/config/configuration-acrn.toml.in
@@ -21,11 +21,15 @@ image = "@IMAGEPATH@"
 # of the annotation, e.g. "path" for io.katacontainers.config.hypervisor.path"
 enable_annotations = @DEFENABLEANNOTATIONS@
 
-# List of valid annotations values for the hypervisor (default: empty)
+# List of valid annotations values for the hypervisor
 # Each member of the list is a path pattern as described by glob(3).
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @ACRNPATHLIST@
 path_list = @ACRNPATHLIST@
 
-# List of valid annotations values for ctlpath (default: empty)
+# List of valid annotations values for ctlpath
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @ACRNCTLPATHLIST@
 ctlpath_list = @ACRNCTLPATHLIST@
 
 # Optional space-separated list of options to pass to the guest kernel.
diff --git a/cli/config/configuration-clh.toml.in b/cli/config/configuration-clh.toml.in
index 2e5aa0381a..3357b65b2d 100644
--- a/cli/config/configuration-clh.toml.in
+++ b/cli/config/configuration-clh.toml.in
@@ -20,8 +20,10 @@ image = "@IMAGEPATH@"
 # of the annotation, e.g. "path" for io.katacontainers.config.hypervisor.path"
 enable_annotations = @DEFENABLEANNOTATIONS@
 
-# List of valid annotations values for the hypervisor (default: empty)
+# List of valid annotations values for the hypervisor
 # Each member of the list is a path pattern as described by glob(3).
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @CLHPATHLIST@
 path_list = @CLHPATHLIST@
 
 # Optional space-separated list of options to pass to the guest kernel.
@@ -71,7 +73,9 @@ default_memory = @DEFMEMSZ@
 # Path to vhost-user-fs daemon.
 virtio_fs_daemon = "@DEFVIRTIOFSDAEMON@"
 
-# List of valid annotations values for the virtiofs daemon (default: empty)
+# List of valid annotations values for the virtiofs daemon
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFVIRTIOFSDAEMONLIST@
 virtio_fs_daemon_list = @DEFVIRTIOFSDAEMONLIST@
 
 # Default size of DAX cache in MiB
diff --git a/cli/config/configuration-fc.toml.in b/cli/config/configuration-fc.toml.in
index 26f9c8b4a3..45cf7a51be 100644
--- a/cli/config/configuration-fc.toml.in
+++ b/cli/config/configuration-fc.toml.in
@@ -20,8 +20,10 @@ image = "@IMAGEPATH@"
 # of the annotation, e.g. "path" for io.katacontainers.config.hypervisor.path"
 enable_annotations = @DEFENABLEANNOTATIONS@
 
-# List of valid annotations values for the hypervisor (default: empty)
+# List of valid annotations values for the hypervisor
 # Each member of the list is a path pattern as described by glob(3).
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @FCPATHLIST@
 path_list = @FCPATHLIST@
 
 # Path for the jailer specific to firecracker
@@ -32,9 +34,11 @@ path_list = @FCPATHLIST@
 # for this feature today.
 #jailer_path = "@FCJAILERPATH@"
 
-# List of valid jailer path values for the hypervisor (default: empty)
+# List of valid jailer path values for the hypervisor
 # Each member of the list can be a regular expression
-# jailer_path_list = @FCJAILERPATHLIST@
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @FCJAILERPATHLIST@
+jailer_path_list = @FCJAILERPATHLIST@
 
 
 # Optional space-separated list of options to pass to the guest kernel.
diff --git a/cli/config/configuration-qemu-virtiofs.toml.in b/cli/config/configuration-qemu-virtiofs.toml.in
index 74af32ad71..0bfd38a9c4 100644
--- a/cli/config/configuration-qemu-virtiofs.toml.in
+++ b/cli/config/configuration-qemu-virtiofs.toml.in
@@ -19,10 +19,14 @@ machine_type = "@MACHINETYPE@"
 # List of valid annotation names for the hypervisor
 # Each member of the list is a regular expression, which is the base name
 # of the annotation, e.g. "path" for io.katacontainers.config.hypervisor.path"
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFENABLEANNOTATIONS@
 enable_annotations = @DEFENABLEANNOTATIONS@
 
-# List of valid annotations values for the hypervisor (default: empty)
+# List of valid annotations values for the hypervisor
 # Each member of the list is a path pattern as described by glob(3).
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @QEMUVIRTIOFSPATHLIST@
 path_list = @QEMUVIRTIOFSPATHLIST@
 
 # Optional space-separated list of options to pass to the guest kernel.
@@ -113,7 +117,9 @@ shared_fs = "@DEFSHAREDFS_QEMU_VIRTIOFS@"
 # Path to vhost-user-fs daemon.
 virtio_fs_daemon = "@DEFVIRTIOFSDAEMON@"
 
-# List of valid annotations values for the virtiofs daemon (default: empty)
+# List of valid annotations values for the virtiofs daemon
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFVIRTIOFSDAEMONLIST@
 virtio_fs_daemon_list = @DEFVIRTIOFSDAEMONLIST@
 
 # Default size of DAX cache in MiB
@@ -195,7 +201,9 @@ enable_vhost_user_store = @DEFENABLEVHOSTUSERSTORE@
 # simulated block device nodes for vhost-user devices to live.
 vhost_user_store_path = "@DEFVHOSTUSERSTOREPATH@"
 
-# List of valid annotations values for the virtiofs daemon (default: empty)
+# List of valid annotations values for the virtiofs daemon
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFVHOSTUSERSTOREPATHLIST@
 vhost_user_store_path_list = @DEFVHOSTUSERSTOREPATHLIST@
 
 # Enable file based guest memory support. The default is an empty string which
@@ -204,8 +212,10 @@ vhost_user_store_path_list = @DEFVHOSTUSERSTOREPATHLIST@
 # This option will be ignored if VM templating is enabled.
 #file_mem_backend = "@DEFFILEMEMBACKEND@"
 
-# List of valid annotations values for the file_mem_backend annotation (default: empty)
-#file_mem_backend_list = @DEFFILEMEMBACKENDLIST@
+# List of valid annotations values for the file_mem_backend annotation
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFFILEMEMBACKENDLIST@
+file_mem_backend_list = @DEFFILEMEMBACKENDLIST@
 
 # Enable swap of vm memory. Default false.
 # The behaviour is undefined if mem_prealloc is also set to true
diff --git a/cli/config/configuration-qemu.toml.in b/cli/config/configuration-qemu.toml.in
index f09fcd942b..6ebdf066a0 100644
--- a/cli/config/configuration-qemu.toml.in
+++ b/cli/config/configuration-qemu.toml.in
@@ -22,8 +22,10 @@ machine_type = "@MACHINETYPE@"
 # of the annotation, e.g. "path" for io.katacontainers.config.hypervisor.path"
 enable_annotations = @DEFENABLEANNOTATIONS@
 
-# List of valid annotations values for the hypervisor (default: empty)
+# List of valid annotations values for the hypervisor
 # Each member of the list is a path pattern as described by glob(3).
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @QEMUPATHLIST@
 path_list = @QEMUPATHLIST@
 
 # Optional space-separated list of options to pass to the guest kernel.
@@ -120,7 +122,9 @@ shared_fs = "@DEFSHAREDFS@"
 # Path to vhost-user-fs daemon.
 virtio_fs_daemon = "@DEFVIRTIOFSDAEMON@"
 
-# List of valid annotations values for the virtiofs daemon (default: empty)
+# List of valid annotations values for the virtiofs daemon
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFVIRTIOFSDAEMONLIST@
 virtio_fs_daemon_list = @DEFVIRTIOFSDAEMONLIST@
 
 # Default size of DAX cache in MiB
@@ -202,7 +206,9 @@ enable_vhost_user_store = @DEFENABLEVHOSTUSERSTORE@
 # simulated block device nodes for vhost-user devices to live.
 vhost_user_store_path = "@DEFVHOSTUSERSTOREPATH@"
 
-# List of valid annotations values for the vhost user store path (default: empty)
+# List of valid annotations values for the vhost user store path
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFVHOSTUSERSTOREPATHLIST@
 vhost_user_store_path_list = @DEFVHOSTUSERSTOREPATHLIST@
 
 # Enable file based guest memory support. The default is an empty string which
@@ -211,8 +217,10 @@ vhost_user_store_path_list = @DEFVHOSTUSERSTOREPATHLIST@
 # This option will be ignored if VM templating is enabled.
 #file_mem_backend = "@DEFFILEMEMBACKEND@"
 
-# List of valid annotations values for the file_mem_backend annotation (default: empty)
-#file_mem_backend_list = @DEFFILEMEMBACKENDLIST@
+# List of valid annotations values for the file_mem_backend annotation
+# The default if not set is empty (all annotations rejected.)
+# Your distribution recommends: @DEFFILEMEMBACKENDLIST@
+file_mem_backend_list = @DEFFILEMEMBACKENDLIST@
 
 # Enable swap of vm memory. Default false.
 # The behaviour is undefined if mem_prealloc is also set to true