Update comments regarding the OAuth shim default