Re: RFC2518 issues IF_AND_AUTH and LOCK_SEMANTICS

> >>> Servers MAY restrict usage of the lock token to exactly the
> >>> authenticated principal who created the lock. Servers MAY also allow
> >>> other privileged authenticated principals or even unauthenticated
> >>> principals to use the lock token.
> 
> Actually I'd make that
> 
> "Servers SHOULD restrict usage of the lock token to exactly the
> authenticated principal who created the lock. Servers MAY also allow
> other privileged authenticated principals or even unauthenticated
> principals to use the lock token."
> 
> (first MAY -> SHOULD).
 I agree with Julian's sentiments, but either wording works for me.