diff --git a/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/ConfigServeAuthInterceptor.cs b/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/ConfigServeAuthInterceptor.cs
index 0c0bda38..d313506e 100644
--- a/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/ConfigServeAuthInterceptor.cs
+++ b/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/ConfigServeAuthInterceptor.cs
@@ -33,6 +33,11 @@ namespace ZB.MOM.WW.OtOpcUa.Host.Configuration;
/// wrong key cannot be recovered byte-by-byte from response timing. Length differences are
/// unavoidably observable and are not sensitive.
///
+///
+/// Exactly one public constructor. Grpc.AspNetCore silently stops invoking an
+/// interceptor that has more than one public ctor — see
+/// ConfigServeAuthInterceptorTests.HasExactlyOnePublicConstructor.
+///
///
public sealed class ConfigServeAuthInterceptor : Interceptor
{
diff --git a/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSyncAuthInterceptor.cs b/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSyncAuthInterceptor.cs
index fc6ba41e..a8b52404 100644
--- a/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSyncAuthInterceptor.cs
+++ b/src/Server/ZB.MOM.WW.OtOpcUa.Host/Configuration/LocalDbSyncAuthInterceptor.cs
@@ -38,6 +38,11 @@ namespace ZB.MOM.WW.OtOpcUa.Host.Configuration;
/// a wrong key cannot be recovered byte-by-byte from response timing. Length differences are
/// unavoidably observable and are not sensitive.
///
+///
+/// Exactly one public constructor. Grpc.AspNetCore silently stops invoking an
+/// interceptor that has more than one public ctor — see
+/// LocalDbSyncAuthInterceptorTests.HasExactlyOnePublicConstructor.
+///
///
public sealed class LocalDbSyncAuthInterceptor : Interceptor
{