diff --git a/TODO b/TODO
index d6349c74d1..e8b62bfe1f 100644
--- a/TODO
+++ b/TODO
@@ -303,6 +303,7 @@ Features:
   - systemd-dissect
   - systemd-sysupdate
   - systemd-analyze
+  - systemd-pcrlock (to allow fwupd to relax policy)
   - kernel-install
 
 * Varlink: add glue code to allow varlink clients to be authenticated via