update NEWS

diff --git a/TODO b/TODO
index 7571c0b30fc20b80cdb656269241e1c91a628405..2322b4740be1c545ac90aad9e35a93d13c170c06 100644 (file)
--- a/TODO
+++ b/TODO
@@ -131,6 +131,12 @@ Deprecations and removals:
 
 Features:
 
+* use kernel 6.3's "noswap" parameter in tmpfs in place of ramfs for storing
+  credentials.
+
+* import-creds: allocate a non-swap-backed fs for /run/credentials/@system,
+  like we do for services.
+
 * new "systemd-pcrlock" component for dealing with PCR4. Design idea:
   1. define /{etc,usr,var/lib}/pcrlock.d/<component>/<version>.pcrlock
   2. these files contain list of hashes that will be measured when component is