access: a key's comment 256 bytes at most

Review 4, 1250's note: a key's comment was kept as given, unbounded but by the request
limit (2 MiB), in protocol data every node holds and the dashboard shows. It says whose
and where the key is: at most 256 bytes now (`sshsig::MAX_COMMENT`), a longer one
refused with the key.

1 files changed, 1 insertions, 1 deletions

diff --git a/docs/access.md b/docs/access.md
index 402f1ab..94ca195 100644
--- a/docs/access.md
+++ b/docs/access.md
@@ -33,7 +33,7 @@ password hashes: every member reads the document).
   doesn't read is left out, and anything but `false` disables.
 * **`keys`**: the user's SSH keys, each by a name of its choosing, as an
   `authorized_keys` line has it (`"laptop": "ssh-ed25519 AAAA… alice@laptop"`; Ed25519
-  only; the comment is kept and checks nothing): what it signs values with (Values signed by their users, below) and logs in with. A user
+  only; the comment, 256 bytes at most, is kept and checks nothing): what it signs values with (Values signed by their users, below) and logs in with. A user
   manages its own, whatever else it may do: `GET /auth/keys`, `PUT /auth/keys/<name>`
   with the line, `DELETE /auth/keys/<name>`; under a strict policy, by signing its
   entry with only its keys changed (`continuum-signed key-add laptop