mention svcaccount policy

service/object-storage.md

@@ -140,8 +140,11 @@ commandline with:
     mc admin user svcacct add admin gitlab
 
 This will display the credentials in plain text on the terminal, so
-watch out for shoulder surfing. The key will inherit the policies
-established above for the user.
+watch out for shoulder surfing.
+
+The key will inherit the policies established above for the user. So
+unless you want the access key have the same access as the user, make
+sure to attach a policy to the access key.
 
 If you have just created a user, you might want to add an alias for
 that user on the server as well, so that future operations can be done