update TODO

diff --git a/TODO b/TODO
index b65ee8df1c695ff65a73df64c9b0e4de5f25015f..34db15c1777d12d3e57d2be66e3e09485627bdc0 100644 (file)
--- a/TODO
+++ b/TODO
@@ -21,6 +21,10 @@ Janitorial Clean-ups:
 
 Features:
 
+* add a concept for automatically loading per-unit secrets off disk and
+  inserting them into the kernel keyring. Maybe SecretsDirectory= similar to
+  ConfigurationDirectory=.
+
 * systemd-gpt-auto: if we find the root dir mounted read-only and the gpt flag
   doesn't say so generate job that remounts it writable