diff --git a/etc/security/access-security-misc.conf b/etc/security/access-security-misc.conf
index 1dfc0eb..dab18cb 100644
--- a/etc/security/access-security-misc.conf
+++ b/etc/security/access-security-misc.conf
@@ -4,6 +4,10 @@
 ## Console Lockdown
 ## https://forums.whonix.org/t/etc-security-hardening/8592
 
+## This is the error message should this fail:
+## sudo su
+## sudo: PAM account management error: Permission denied
+
 ## see also:
 ## man access.conf
 ## man pam_access