diff --git a/TODO b/TODO
index 77da63aa05a..479bd94d664 100644
--- a/TODO
+++ b/TODO
@@ -132,6 +132,10 @@ Deprecations and removals:
 
 Features:
 
+* vmspawn: to speed up boot let's disable all PCR banks in swtpm except for
+  SHA256. Probably means running swtpm_setup --state-dir … --tpm2 --pcr-banks
+  sha256.
+
 * in os-release define a field that can be initialized at build time from
   SOURCE_DATE_EPOCH (maybe even under that name?). Would then be used to
   initialize the timestamp logic of ConditionNeedsUpdate=.