diff --git a/docs/TODO b/docs/TODO
index c4ff596a1..e54dfff41 100644
--- a/docs/TODO
+++ b/docs/TODO
@@ -1,6 +1,7 @@
 Short term:
 
 - drop all the os.access() calls, since it uses the real UID
+- migrate entropy.db per-thread resources to TLS (threading.local())
 - eit cache clean
 - drop all the EntropyCacher.CACHE_IDS