Add note about dropping auth record if 040.f is missing