Also, just found another set of steps to get the 404:
* Add a comment to an article as general reader
* As the author respond to the comment
* Click on the link in the email
* As a general user click on the Manage link in the comment area
* Receive a 404