diff --git a/TODO b/TODO
index 800b626..bef2d57 100644
--- a/TODO
+++ b/TODO
@@ -24,3 +24,7 @@
 7) [DONE] figure out initial API
 
 8) figure out error-handling and remove fatal()
+
+9) Rework privsep's interaction with packet.c: factor everything into
+   packet_get_privsep_state and packet_set_privsep_state functions
+