diff --git a/index.html b/index.html
index 97ec158..150c347 100644
--- a/index.html
+++ b/index.html
@@ -345,7 +345,7 @@ <h3>
       <h3>
         User consent
       </h3>
-      <p>
+      <p data-cite="permissions">
         The <cite>Digital Credential API</cite> is a [=powerful feature=] that
         requires [=express permission=] from an end-user. This requirement is
         normatively enforced when calling {{CredentialsContainer}}'s
@@ -360,7 +360,7 @@ <h2>
         This specification defines a [=policy-controlled feature=] identified
         by the string <dfn class="permission">"digital-credentials-get"</dfn>.
         Its [=policy-controlled feature/default allowlist=] is
-        [=allowlist/'self'=].
+        [=default allowlist/'self'=].
       </p>
     </section>
     <h2 id="protocol-registry">