+* system.conf should have controls for cgroups
+
+* bind mount read-only the cgroup tree higher than than nspawn
+
+* currently system services appear not to generate core dumps...
+
+* wall messages for shutdown should move to logind
+
+* allow writing multiple conditions in unit files on one line
+
+* There's something wrong with escaping unit names: http://lists.freedesktop.org/archives/systemd-devel/2012-August/006292.html
+
+* cleanup ellipsation for log output in journalctl and systemctl status: have a sane way to disable ellipsation, and disable it by default when invoked in less/more
+
+* enforce limits on fds openened by socket units
+
+* explore multiple service instances per listening socket idea
+
+* testing tool for socket activation: some binary that listens on a socket and passes it on using the usual socket activation protocol to some server.
+
+* maybe make systemd-detect-virt suid? or use fscaps?