minor edit

index.bs

@@ -681,7 +681,7 @@ When this method is invoked, the user agent MUST execute the following algorithm
     while allowing [=[RP]=] script access to Web Authentication functionality, e.g., when running in
     a [=secure context=] framed document that is [=same-origin with its ancestors=].
     However, in the future, this specification may provide [=[RPS]=] with more fine-grained control--e.g., ranging
-    from disallowing access to Web Authentication functionality in whole,
+    from allowing only top-level access to Web Authentication functionality,
     to allowing cross-origin embedded cases--by leveraging
     [[Feature-Policy]] once the latter specification becomes stably implemented in user agents.
 
@@ -1017,7 +1017,7 @@ When this method is invoked, the user agent MUST execute the following algorithm
     while allowing [=[RP]=] script access to Web Authentication functionality, e.g., when running in
     a [=secure context=] framed document that is [=same-origin with its ancestors=].
     However, in the future, this specification may provide [=[RPS]=] with more fine-grained control--e.g., ranging
-    from disallowing access to Web Authentication functionality in whole,
+    from allowing only top-level access to Web Authentication functionality,
     to allowing cross-origin embedded cases--by leveraging
     [[Feature-Policy]] once the latter specification becomes stably implemented in user agents.