Add TODO to explore anonymous PKINIT

1 files changed, 3 insertions, 0 deletions

diff --git a/TODO b/TODO
index 32b307f..1e9f3c9 100644
--- a/TODO
+++ b/TODO
@@ -87,6 +87,9 @@ ACLs:
  * Provide an API for verifiers to syntax-check the values before an ACL
    is set and implement syntax checking for the Krb5 verifier.
 
+ * Investigate how best to support client authentication using anonymous
+   PKINIT for things like initial system keying.
+
 Database:
 
  * Fix case-insensitivity bug in unique keys with MySQL for objects.