diff --git a/TODO b/TODO
index f9d2adeb..ee93147f 100644
--- a/TODO
+++ b/TODO
@@ -1,5 +1,11 @@
 Short term items:
 
+* Separate accounting from authentication. I.e., allow a client which
+  is authenticated with certificates to report stats using radius.
+
+* Move the banned list into the main process. That would allow faster
+  rejection of banned clients.
+
 * Use the UDP address to report the client's IP when sniproxy or haproxy
   are being used.