diff --git a/TODO b/TODO
index d5aa5425..fec2f567 100644
--- a/TODO
+++ b/TODO
@@ -31,6 +31,9 @@
 
 * Improve library
 
+* Do HTTP requests as unprivileged user (particularly before we've
+  done GPG verification)
+
 * Reintroduce "ostree admin install": Could pull in host data,
   such as uids and /etc/fstab.
 
diff --git a/src/libostree/ostree-repo-static-delta-private.h b/src/libostree/ostree-repo-static-delta-private.h
index a5ad37ce..ec9e8412 100644
--- a/src/libostree/ostree-repo-static-delta-private.h
+++ b/src/libostree/ostree-repo-static-delta-private.h
@@ -61,7 +61,7 @@ G_BEGIN_DECLS
  *   metadata: a{sv}
  *   timestamp: guint64
  *   ARRAY[(csum from, csum to)]: ay
- *   ARRAY[delta-part-header]
+ *   ARRAY[delta-meta-entry]
  *
  * The metadata would include things like a version number, as well as
  * extended verification data like a GPG signature.