diff --git a/1.44.0.md b/1.44.0.md
index 26432b5..20eee96 100644
--- a/1.44.0.md
+++ b/1.44.0.md
@@ -7,6 +7,7 @@
 - MagicSock will prefer private addresses when both private and public are available, to keep traffic in private VPCs where possible
 - update to Go 1.20.5
 - remove async support from `portlist` package, please update to use synchronous `Poll()` if this breaks your package
+- `WatchIPNBus` requires only read-only permissions to read
 
 ### Linux
 - better support SELinux systems using Tailscale SSH