diff --git a/equinix/design/permissions-migration/test-plan.org b/equinix/design/permissions-migration/test-plan.org
index 9661149..3cafaa5 100644
--- a/equinix/design/permissions-migration/test-plan.org
+++ b/equinix/design/permissions-migration/test-plan.org
@@ -59,6 +59,10 @@ The success criteria for this step are:
 - CI test duration does not increase significantly compared to usual
   runtimes (canary CI runtime  <= 150% normal runtime)
 
+Typical CI tests uses API keys instead of an Identity API JWT, which would be
+necessary for a permissions API check, so I'll need to modify
+terraform to pull the credentials appropriately.
+
 Rolling back here just involves cleaning up canary resources, and has
 no impact on customer experience.