diff --git a/TODO b/TODO
index 6af4cd536..29f964f53 100644
--- a/TODO
+++ b/TODO
@@ -35,6 +35,8 @@ implement support for interoperability with kerberos V4.
 
 needs a configuration file.
 
+pre-authentication required per principal
+
 * kuser
 
 ** kinit