authorize: add a note about the defaults