diff --git a/sys/netinet6/ipsec.c b/sys/netinet6/ipsec.c
index 3dcadc0e1ed5..294711e7f266 100644
--- a/sys/netinet6/ipsec.c
+++ b/sys/netinet6/ipsec.c
@@ -1225,8 +1225,6 @@ ipsec_init_pcbpolicy(so, pcb_sp)
 	/*
 	 * XXXRW: Can we avoid caching the privilege decision here, and
 	 * instead cache the credential?
-	 *
-	 * XXXRW: Why is suser_allowjail set here?
 	 */
 	if (so->so_cred != NULL && priv_check_cred(so->so_cred,
 	    PRIV_NETINET_IPSEC, 0) == 0)