diff --git a/TODO b/TODO
index ecdde830af..96db4a57d8 100644
--- a/TODO
+++ b/TODO
@@ -22,6 +22,8 @@ Bugfixes:
 
 Features:
 
+* switch-root add extra safety check
+
 * switch-root: reopen /dev/console before switching root
 
 * switch-root: sockets need relabelling