diff --git a/salt/sys-usb/README.md b/salt/sys-usb/README.md
index e70f841..a3c7140 100644
--- a/salt/sys-usb/README.md
+++ b/salt/sys-usb/README.md
@@ -6,6 +6,7 @@ PCI handler of USB devices in Qubes OS.
 
 * [Description](#description)
 * [Installation](#installation)
+* [Access control](#access-control)
 * [Usage](#usage)
 * [Credits](#credits)
 
@@ -55,6 +56,14 @@ And enable the CTAP Proxy service for the client qubes:
 qvm-features QUBE service.qubes-ctap-proxy 1
 ```
 
+## Access control
+
+No extra services are implemented, consult upstream to learn how to use the
+following services:
+- `qubes.InputMouse`, `qubes.InputKeyboard`, `qubes.InputTablet`;
+- `ctap.GetInfo`, `ctap.ClientPin`, `u2f.Register`, `u2f.Authenticate`,
+  `policy.RegisterArgument`.
+
 ## Usage
 
 Start a USB qube an connect a device to it.  USB PCI devices will appear on