diff --git a/TODO.md b/TODO.md
index 930909f40..9e9e870e1 100644
--- a/TODO.md
+++ b/TODO.md
@@ -88,6 +88,7 @@
 - make gnome-keyring-daemon less monolithic
   - no reason every application with _a_ secret needs to see _all_ secrets
   - check out oo7-daemon?
+  - also unix-pass based provider: <https://github.com/mdellweg/pass_secret_service>
 - make dconf stuff less monolithic
   - i.e. per-app dconf profiles for those which need it. possible static config.
   - flatpak/spectrum has some stuff to proxy dconf per-app