diff --git a/agent/TODO b/agent/TODO
new file mode 100644
index 000000000..9443d0e64
--- /dev/null
+++ b/agent/TODO
@@ -0,0 +1,3 @@
+* use secure memory
+* implement locking for key i/o
+* ...