diff --git a/core/src/main/java/hudson/security/ACL.java b/core/src/main/java/hudson/security/ACL.java
index cc4739bd7b..2a1b230f5f 100644
--- a/core/src/main/java/hudson/security/ACL.java
+++ b/core/src/main/java/hudson/security/ACL.java
@@ -27,6 +27,7 @@ import javax.annotation.Nonnull;
 import hudson.remoting.Callable;
 import jenkins.security.NonSerializableSecurityContext;
 import jenkins.model.Jenkins;
+import jenkins.security.NotReallyRoleSensitiveCallable;
 import org.acegisecurity.AccessDeniedException;
 import org.acegisecurity.Authentication;
 import org.acegisecurity.context.SecurityContext;
@@ -150,8 +151,8 @@ public abstract class ACL {
     /**
      * Safer variant of {@link #impersonate(Authentication)} that does not require a finally-block.
      * @param auth authentication, such as {@link #SYSTEM}
-     * @param body an action to run with this alternate authentication in effect
-     * @since TODO
+     * @param body an action to run with this alternate authentication in effect (try {@link NotReallyRoleSensitiveCallable})
+     * @since 1.587
      */
     public static <V,T extends Exception> V impersonate(Authentication auth, Callable<V,T> body) throws T {
         SecurityContext old = impersonate(auth);