diff --git a/README.org b/README.org
index 942383f..232e1c5 100644
--- a/README.org
+++ b/README.org
@@ -544,9 +544,9 @@ to be able to sensibly trust their computing systems in this modern
 age.
 
 To be sure, we need authentication when it is important to know that a
-certain entity "said a particular thing", but we need to know that
-this is not the same as knowing whether a particular entity "can do a
-certain thing".
+certain entity "said a particular thing", but it is important to
+understand that this is not the same as knowing whether a particular
+entity "can do a certain thing".
 
 Mixing up authentication with authorization is how we get ACLs,
 and ACLs have serious problems.