-* add "M" as recursive version of "m" to tmpfiles, then use it for
- chowning /run/log/journal (but not /var/log/journal), so that we
- adjust the perms of journal files created before tmpfiles ran.
+* figure out a nice way how we can let the admin know what child/sibling unit causes cgroup membership for a specific unit
+
+* journalctl: add the ability to look for the most recent process of a binary. journalctl /usr/bin/X11 --pid=-1 or so...
+
+* set NOTIFY_SOCKET also for control processes
+
+* mount_cgroup_controllers(): symlinks need to get the label applied
+
+* For timer units: add some mechanisms so that timer units that trigger immediately on boot do not have the services
+ they run added to the initial transaction and thus confuse Type=idle.
+
+* Add timeout to early-boot, and shut down the system if it is hit. Solves the laptop-in-bag problem and is useful for embedded cases
+
+* Run most system services with cgroupfs read-only and procfs with a more secure mode (doesn't work, since the hidepid= option is per-pid-namespace, not per-mount)
+
+* sd-event: generate a failure of a default event loop is executed out-of-thread