diff --git a/src/management.ml b/src/management.ml
index 31e1c690..63480e6a 100644
--- a/src/management.ml
+++ b/src/management.ml
@@ -250,6 +250,7 @@ let verify_auditor_add_sig
       h_auditor_url= Bin_type.Hash_64_cstr.hash auditor_url;
     }
 
+(* todo: there is something about use of monotonic time + protection against replay attack that I don't understand *)
 let update_auditor ~db_conn
     AuditorSetupMessage.
       { auditor_url; auditor_name; auditor_pub; master_sig= _; validity_start }