Question on "11.3.3.1. Notes on Proxy Authorization Rules"