diff --git a/TODO b/TODO
index e167469d32..b86e308303 100644
--- a/TODO
+++ b/TODO
@@ -37,6 +37,8 @@ External:
 
 Features:
 
+* add infrastructure to allocate dynamic/transient users and UID ranges, for use in user-namespaced containers, per-seat gdm login screens and gdm guest sessions
+
 * resolved: maybe randomize DNS UDP source ports
 
 * resolved: maybe compare query section of DNS replies