diff --git a/README.md b/README.md
index 1dbebae..699a776 100644
--- a/README.md
+++ b/README.md
@@ -1,10 +1,12 @@
 # status-reporter
 
-The status reporter is a controller that watches tekton `PipelineRuns` for status cahnges.
+`status-reporter` is a controller that watches tekton `PipelineRuns` for status cahnges.
 These are synced to the associated git commit hashes.
 
 For successful runs a preview environment comment will be added to the pull request.
 
+The controller is supposed to be running as a single instance, because it maintains a memory-local cache.
+
 `PipelineRun` requirements:
 
 Params:
diff --git a/config/300-rbac.yaml b/config/300-rbac.yaml
index d70448a..aa0e438 100644
--- a/config/300-rbac.yaml
+++ b/config/300-rbac.yaml
@@ -39,7 +39,7 @@ metadata:
 rules:
 - apiGroups: [""]
   resources: ["secrets"]
-  verbs: ["get", "list", "watch"]
+  verbs: ["get"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding