diff --git a/webhooks/config.go b/webhooks/config.go
index c5ebbdb426d1aa5579be55a346ca0fbc6dcfb686..73b41e679a9882c6a8ca645283dd1e5ab865818d 100644
--- a/webhooks/config.go
+++ b/webhooks/config.go
@@ -11,11 +11,11 @@ 	sq "github.com/Masterminds/squirrel"
 )
 
 // The following invariants apply to AuthConfig:
-// 1. AuthMethod will be either OAUTH2 or INTERNAL
-// 2. If OAUTH2, TokenHash, Grants, and Expires will be non-nil, and ClientID
-//    may be non-nil, and NodeID will be nil.
-// 3. If INTERNAL, TokenHash, Grants, Expires, and ClientID will be nil, and
-//    NodeID will be non-nil.
+//  1. AuthMethod will be either OAUTH2 or INTERNAL
+//  2. If OAUTH2, TokenHash, Grants, and Expires will be non-nil, and ClientID
+//     may be non-nil, and NodeID will be nil.
+//  3. If INTERNAL, TokenHash, Grants, Expires, and ClientID will be nil, and
+//     NodeID will be non-nil.
 type AuthConfig struct {
 	AuthMethod string
 	TokenHash  *string