+* add infrastructure to allocate dynamic/transient users and UID ranges, for use in user-namespaced containers, per-seat gdm login screens and gdm guest sessions
+
+* resolved: maybe randomize DNS UDP source ports
+
+* resolved: maybe compare query section of DNS replies
+
+* machined: add an API so that libvirt-lxc can inform us about network interfaces being removed or added to an existing machine
+
+* maybe add support for specifier expansion in user.conf, specifically DefaultEnvironment=
+
+* kdbus: set the bus-wide creds sender requirement mask to ANY
+
+* kdbus: busnames.target should get pulled in by basic.target
+
+* code cleanup: retire FOREACH_WORD_QUOTED, port to unquote_first_word() loops instead
+