diff --git a/src/main/docbkx/security.xml b/src/main/docbkx/security.xml
index 9a76c8b..03fab9e 100644
--- a/src/main/docbkx/security.xml
+++ b/src/main/docbkx/security.xml
@@ -1183,6 +1183,7 @@ public static void verifyAllowed(User user, AccessTestAction action, int count)
public label.
+ ( secret | topsecret ) & !probationary
Allow access to users associated with either the
secret or topsecret label and not
associated with the probationary label.