+* maybe make systemd-detect-virt suid? or use fscaps?
+
+* man: document in ExecStart= explicitly that we don't take shell command lines, only executable names with arguments
+
+* shutdown: don't read-only mount anything when running in container
+
+* nspawn: --read-only is not applied recursively to submounts
+
+* MountFlags=shared acts as MountFlags=slave right now.
+
+* ReadOnlyDirectories= is not applied recursively to submounts
+
+* drop PID 1 reloading, only do reexecing (difficult: Reload()
+ currently is properly synchronous, Reexec() is weird, because we
+ can't delay the response properly until we are back, so instead of
+ being properly synchronous we just keep open the fd and close it
+ when done. That means clients don't get a succesful method reply,
+ but much rather a disconnect on success.
+
+* document that service reload may be implemented as service reexec
+
+* remember which condition failed for services, not just the fact that something failed
+
+* use opterr = 0 for all getopt tools
+
+* properly handle loop back mounts via fstab, especially regards to fsck/passno
+
+* allow services with no ExecStart= but with an ExecStop=
+
+* add proper journal support to "systemctl --user status ..."
+
+* add _SYSTEMD_USER_UNIT= field to journal entries
+
+* remove Fedora /dev/null logic from localed.c, now that system-config-keyboard is gone
+ delete /etc/X11/xorg.conf.d/00-system-setup-keyboard.conf from spec file
+
+* journal: expose current disk usage
+
+* dracut-shutdown needs to be ordered before unmounting /boot
+
+* wiki: document new logind LockSessions() call
+
+* initialize the hostname from the fs label of /, if /etc/hostname does not exist?
+
+* logind: different policy actions for idle, suspend, shutdown blockers: allow idle blockers by default, don't allow suspend blockers by default
+
+* install README to /etc/rc.d/init.d (if support for that is enabled) helping people who use "ls" there to figure out which services exist.
+
+* logind: ignore inactive login screens when checking whether power key should be handled
+
+* rename "userspace" to "core-os"
+
+* systemctl: "Journal has been rotated since unit was started." message is misleading
+
+* syscall filter: add knowledge about compat syscalls
+
+* syscall filter: don't enforce no new privs?
+
+* syscall filter: option to return EPERM rather than SIGSYS?
+
+* syscall filter: port to libseccomp
+
+* logind: wakelock/opportunistic suspend support
+
+* switch-root: sockets need relabelling
+
+* systemd-analyze post-boot is broken for initrd
+
+* man: clarify that time-sync.target is not only sysv compat but also useful otherwise. Same for similar targets
+
+* .device aliases need to be implemented with the "following" logic, probably.
+
+* refuse taking lower-case variable names in sd_journal_send() and friends.
+
+* load-fragment: when loading a unit file via a chain of symlinks
+ verify that it isn't masked via any of the names traversed.
+
+* journald: we currently rotate only after MaxUse+MaxFilesize has been reached.
+
+* Document:
+ - PID 1 D-Bus API
+
+* introduce Type=pid-file
+
+* systemctl list-unit-files appears to be broken for symlinked units in /usr/lib
+
+* maybe allow services with ExecStop= set, but no ExecStart=?
+
+* efi: implement /forcefsck as uefi variables thus not requiring file system altering to trigger a file system check
+
+* efi: honour language efi variables for default language selection
+
+* efi: honour timezone efi variables for default timezone selection
+
+* efi: automatically mount EFI partition to /boot if no such entry exists in /etc/fstab and /boot is empty
+ gummiboot exports the EFI system partion (ESP) device:
+ /sys/firmware/efi/vars/LoaderDeviceIdentifier-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
+ Acpi(PNP0A03,0)/Pci(1F|2)/?/HD(Part1,Sig1FCBC57F-4BFC-4C2B-91A3-9C84FBCD9AF1)
+ '/' is the separator for the device path list
+ HD(Part1,Sig1FCBC57F-4BFC-4C2B-91A3-9C84FBCD9AF1) contains the GPT UUID of the ESP
+
+* read the bootloader performance data (raw TSC) in systemd-analyze
+ /sys/firmware/efi/vars/LoaderTicksExec-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
+ 19066159288
+ /sys/firmware/efi/vars/LoaderTicksInit-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
+ 17442940316
+ /sys/firmware/efi/vars/LoaderTicksStartMenu-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f/data
+ (only set if the menu was active)
+
+* change Requires=basic.target to RequisiteOverride=basic.target
+
+* support rd.luks.allow-discards= kernel cmdline params in cryptsetup generator
+
+* systemctl: when stopping a service which has triggres and warning about it actually check the TriggeredBy= deps fields
+
+* journal: hook up with EFI firmware log
+
+* handle C-A-Del in logind, like the power/suspend buttons?
+
+* nspawn: make use of device cgroup contrller by default
+
+* drop accountsservice's StandardOutput=syslog and Type=dbus fields
+
+* when breaking cycles drop sysv services first, then services from /run, then from /etc, then from /usr