Issue #12: OAuth policy - comment.