changelog++

CHANGELOG.md

@@ -18,12 +18,13 @@ FEATURES:
    behavior is also still available. [GH-2441]
  * **MSSQL Physical Backend**: You can now use Microsoft SQL Server as your
    Vault physical data store [GH-2546]
- * **Lease Listing and Lookup**: You can now introspect a lease to get its creation
-   and expiration properties via `sys/leases/lookup`; with `sudo` capability
-   you can also list leases for lookup, renewal, or revocation via that
-   endpoint. Various lease functions (renew, revoke, revoke-prefix,
+ * **Lease Listing and Lookup**: You can now introspect a lease to get its
+   creation and expiration properties via `sys/leases/lookup`; with `sudo`
+   capability you can also list leases for lookup, renewal, or revocation via
+   that endpoint. Various lease functions (renew, revoke, revoke-prefix,
    revoke-force) have also been relocated to `sys/leases/`, but they also work
-   at the old paths for compatibility. [GH-2650]
+   at the old paths for compatibility. Reading (but not listing) leases via
+   `sys/leases/lookup` is now a part of the current `default` policy. [GH-2650]
 
 IMPROVEMENTS: