diff --git a/tools/offline.ml b/tools/offline.ml
index 595bcc9c..4aa05bd1 100644
--- a/tools/offline.ml
+++ b/tools/offline.ml
@@ -1,6 +1,11 @@
-(* not done:
-  /management/aml-officers (for /aml)
-  /management/partners (for /wads) *)
+(* TODO
+   don't trust any public keys
+   keep trusted exchange/secmod keys
+   either from config or TOFU (Trust On First Use)
+
+   not done:
+   /management/aml-officers (for /aml)
+   /management/partners (for /wads) *)
 open Cmdliner
 open Cmdliner.Term.Syntax
 open Offline_impl