diff --git a/docs/3.0-migration-guide.md b/docs/3.0-migration-guide.md
index 7f09449a29..90d787773d 100644
--- a/docs/3.0-migration-guide.md
+++ b/docs/3.0-migration-guide.md
@@ -246,16 +246,6 @@ Alternative implementations of the SHA256 and SHA512 modules must adjust their f
 Please also refer to the section [Low-level crypto](#low-level-crypto) for
 changes that could sit in either category.
 
-### Remove wrapper for libpkcs11-helper
-
-This doesn't affect people using the default configuration as it was already
-disabled by default.
-
-If you used to rely on this module in order to store your private keys
-securely, please have a look at the key management facilities provided by the
-PSA crypto API. If you have a use case that's not covered yet by this API,
-please reach out on the mailing list.
-
 ### Deprecated functions were removed from hashing modules
 
 Modules: MD5, SHA1, SHA256, SHA512, MD.
@@ -606,6 +596,16 @@ current ones.
 
 This is described in the section [Strengthen default algorithm selection for X.509 and TLS](strengthen-default-algorithm-selection-for-x.509-and-tls).
 
+### Remove wrapper for libpkcs11-helper
+
+This doesn't affect people using the default configuration as it was already
+disabled by default.
+
+If you used to rely on this module in order to store your private keys
+securely, please have a look at the key management facilities provided by the
+PSA crypto API. If you have a use case that's not covered yet by this API,
+please reach out on the mailing list.
+
 
 ## SSL