Merge "security/access: Add an "access tag" caveat."