+* hookup nspawn and PrivateNetwork=yes with "ip netns"
+
+* socket units: support creating sockets in different namespace,
+ opening it up for JoinsNamespaceOf=. This would require to fork off
+ a tiny process that joins the namespace and creates/binds the socket
+ and passes this back to PID1 via SCM_RIGHTS. This also could be used
+ to allow Chown/chgrp on sockets without requiring NSS in PID 1.
+
+* sd-resolve:
+ - make sure event loop integration works similar to event loop integration in other libs
+ - maybe drop _free() call, introduce _unref() instead
+ - maybe simplify function calls that take a sd_resolve_query object, to not also require the matching sd_resolve?
+ - maybe drop the "n_proc" parameter to sd_resolve_new()?
+ - change all functions to return "int" and negative errno errors
+
+* New service property: maximum CPU and wallclock runtime for a service
+
+* introduce bus call FreezeUnit(s, b), as well as "systemctl freeze
+ $UNIT" and "systemctl thaw $UNIT" as wrappers around this. The calls
+ should SIGSTOP all unit processes in a loop until all processes of
+ it are fully stopped. This can later be used for app management by
+ desktop UIs such as gnome-shell to freeze apps that are not visible
+ on screen, not unlike how job control works on the shell
+
+* machinectl bash completion is missing
+* busctl bash and zsh completions are outdated
+
+* Introduce PrivateDevices=yes/no which works like PrivateTmp= but for /dev setting up a tmpfs for it that only includes /dev/null, /dev/zero, /dev/random, /dev/urandom, but nothing else.
+
+* libsystemd-journal returns the object created as first param in sd_journal_new(), sd_bus_new() and suchlike as last...
+