diff --git a/nfd/debian/nfd.conf b/nfd/debian/nfd.conf
index f2e09a5..1119c9a 100644
--- a/nfd/debian/nfd.conf
+++ b/nfd/debian/nfd.conf
@@ -1,12 +1,8 @@
 ; The general section contains settings of nfd process.
 general
 {
-  ; Specify a user and/or group for NFD to drop privileges to
-  ; when not performing privileged tasks. NFD does not drop
-  ; privileges by default.
-
-  ; user ndn
-  ; group ndn
+  user ndn
+  group ndn
 }
 
 log
@@ -57,7 +53,6 @@
   ; The unix section contains settings of UNIX stream faces and channels.
   unix
   {
-    listen yes ; set to 'no' to disable UNIX stream listener, default 'yes'
     path /var/run/nfd.sock ; UNIX stream listener path
   }
 
@@ -207,4 +202,25 @@
   ;   ;   file-name keys/ndn-testbed.ndncert
   ;   ; }
   ; }
+  ;
+  ; The following localhop_security should be enabled when NFD runs on a hub,
+  ; which accepts all remote registrations and is a short-term solution.
+  ; localhop_security
+  ; {
+  ;   trust-anchor
+  ;   {
+  ;     type any
+  ;   }
+  ; }
+
+  remote_register
+  {
+    cost 15 ; forwarding cost of prefix registered on remote router
+    timeout 10000 ; timeout (in milliseconds) of remote prefix registration command
+    retry 0 ; maximum number of retries for each remote prefix registration command
+
+    refresh_interval 300 ; interval (in seconds) before refreshing the registration
+    ; This setting should be less than face_system.udp.idle_time,
+    ; so that the face is kept alive on the remote router.
+  }
 }