+* nspawn: implement personality changes a la linux32(8)
+
+* nspawn: reset all aux groups
+
+* cryptsetup-generator: warn if the password files are world-readable
+
+* cryptsetup-generator: add RequiresMountsFor= to cryptseup service files referencing a file, similar for devices
+
+* cryptsetup-generator: allow specification of passwords in crypttab itself
+
+* document that deps in [Unit] sections ignore Alias= fileds in
+ [Install] units of other units, unless those units are disabled
+
+* need to update LGPL2.1 text to newest version (with updated FSF address)
+
+* allow users from "wheel" to start/stop services
+
+* systemctl: when powering down/suspending check for inhibitors, and warn.
+
+* instantiated [Install] for target units
+ https://bugs.freedesktop.org/show_bug.cgi?id=54377
+
+* support *static* (/run) hibernate inhibitors. All rpm -i actions should completely prevent any
+ sort of hibernate action until the next reboot. If the kernel or any other base tool is replaced
+ by rpm, the resume path might fail, the for resume needed kernel might even be uninstalled, and
+ the whole situation leads directly to data loss.
+
+* move debug shell to tty6 and make sure this doesn't break the gettys on tty6
+
+* move cryptsetup key caching into kernel keyctl?
+ https://bugs.freedesktop.org/show_bug.cgi?id=54982
+
+* make nspawn work without terminal
+
+* hw watchdog: optionally try to use the preset watchdog timeout instead of always overriding it
+ https://bugs.freedesktop.org/show_bug.cgi?id=54712
+
+* after deserializing sockets in socket.c we should reapply sockopts and things
+
+* do shutdown audit/utmp msgs inside of PID 1, get rid of systemd-update-utmp-runlevel
+
+* make timer units go away after they elapsed
+
+* http://lists.freedesktop.org/archives/systemd-devel/2012-September/006502.html
+
+* come up with a nice way to write queue/read_ahead_kb for a block device without interfering with readahead
+
+* journald: add kernel cmdline option to disable ratelimiting for debug purposes
+
+* move PID 1 segfaults to /var/lib/systemd/coredump?
+
+* Document word splitting syntax for ExecStart= and friends
+
+* when writing journal entries order field items by their address to improve speed on rotating media
+
+* create /sbin/init symlinks from the build system
+
+* Query Paul Moore about relabelling socket fds while they are open
+
+* move keymaps to /usr/lib/... rather than /usr/lib/udev/...
+
+* journald: check whether it is OK if the client can still modify delivered journal entries
+
+* json: use jensson
+
+* json: properly serialize multiple fields with the same name per entry
+
+* journal live copy, based on libneon (client) and libmicrohttpd
+
+* document in wiki json serialization
+
+* system-wide seccomp filter
+
+* ability to pass fds into systemd
+
+* system.conf should have controls for cgroups
+
+* bind mount read-only the cgroup tree higher than than nspawn
+
+* currently system services appear not to generate core dumps...
+
+* wall messages for shutdown should move to logind
+
+* allow writing multiple conditions in unit files on one line
+
+* cleanup ellipsation for log output in journalctl and systemctl status: have a sane way to disable ellipsation, and disable it by default when invoked in less/more
+
+* explore multiple service instances per listening socket idea
+
+* testing tool for socket activation: some binary that listens on a socket and passes it on using the usual socket activation protocol to some server.
+
+* maybe make systemd-detect-virt suid? or use fscaps?
+
+* shutdown: don't read-only mount anything when running in container
+
+* nspawn: --read-only is not applied recursively to submounts
+
+* MountFlags=shared acts as MountFlags=slave right now.
+
+* ReadOnlyDirectories= is not applied recursively to submounts
+
+* drop PID 1 reloading, only do reexecing (difficult: Reload()
+ currently is properly synchronous, Reexec() is weird, because we
+ can't delay the response properly until we are back, so instead of
+ being properly synchronous we just keep open the fd and close it
+ when done. That means clients don't get a succesful method reply,
+ but much rather a disconnect on success.
+
+* document that service reload may be implemented as service reexec
+
+* remember which condition failed for services, not just the fact that something failed