diff --git a/TODO b/TODO
index 8fee0eac7d..7a734ef25d 100644
--- a/TODO
+++ b/TODO
@@ -133,6 +133,13 @@ Deprecations and removals:
 
 Features:
 
+* systemd-pcrextend:
+  - support measuring to nvindex with PCR update semantics ("fake PCRs")
+  - add api for "allocating" such an nvindex
+  - once we have that start measuring every sysext we apply, every confext,
+    every RootImage= we apply, evey nspawn and so on. All in separate fake
+    PCRs.
+
 * vmspawn:
   - enable hyperv extension by default (https://www.qemu.org/docs/master/system/i386/hyperv.html)
   - register with machined