diff --git a/TODO b/TODO
new file mode 100644
index 0000000..c190e6b
--- /dev/null
+++ b/TODO
@@ -0,0 +1,14 @@
+* backport luasec 0.5 from jessie for PFS ciphers
+* why tls between jicofo and metronome (luasec >= 0.5 required)
+* why tls between jvb and metronome (luasec >= 0.5 required)
+* support subdir : which rewrite rule ?
+* desktop sharing : chrome extension needs to be reference the host explicitely
+* config.js clientNode : what's this ? see XEP-0115
+* metronome conf : bind vhost and components to localhost
+* wireshark the thing : is everything encrypted ?
+* recording : what can be done ?
+* etherpad
+* ipv6 : what's the status ? clients/server...
+* mod_{smacks,carbons,mam,websocket,turncredentials} not needed actually ?
+* jigasi SIP gateway
+* is there any web based video-sip client around ?
diff --git a/scripts/install b/scripts/install
index aa2f071..260970c 100644
--- a/scripts/install
+++ b/scripts/install
@@ -157,7 +157,7 @@ sudo openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj \
     -out /var/lib/metronome/$jitsi_domain.crt
 
 # TODO : adduser headless with python pexpect ?
-sudo metronomectl adduser focus@auth.$jitsi_domain # $YNH_YOURSECRET3
+#sudo metronomectl adduser focus@auth.$jitsi_domain # $YNH_YOURSECRET3
 
 #--- Configure Nginx ---
 # remove trailing '/'. this leaves '/something' untouched, but changes '/' to ''