Ok.... although I don't see how something like

    # RBAC: Remove stub and add authorization checks

is that much work :) ACK if it is