Think out loud - this kind of information can be quite confusing since BasicAuth is not in the current policy. We should probably also include the merged spec in the status.
Non blocking as this is also true for other merged xPolicies. We can track this as an issue and address it later.
Originally posted by @zhaohuabing in #7918 (comment)