diff --git a/pep-0551.rst b/pep-0551.rst
index f56f4f2d2..0a05271df 100644
--- a/pep-0551.rst
+++ b/pep-0551.rst
@@ -297,7 +297,10 @@ single buffer and the file is closed.
 Compilation will later trigger a ``compile`` event, so there is no need
 to validate the contents now using mechanisms that also apply to
 dynamically generated code. However, if a whitelist of source files or
-file hashes is available, then this is the point
+file hashes is available, then other validation mechanisms such as
+DeviceGuard [4]_ should be performed here.
+
+
 
 **Restrict globals in pickles**