diff --git a/TODO b/TODO
index 96324ad..7a1e1df 100644
--- a/TODO
+++ b/TODO
@@ -17,3 +17,10 @@
   need ntp installed for a good date source.
 * Docking a container in a host should add to the host any cnames that
   are assigned to the container.
+* Either `Ssh.hostKey` should set the sshPubKey attr
+  (which seems hard, as attrs need to be able to be calculated without
+  running any IO code, and here IO is needed along with decrypting the
+  PrivData..), or the public key should not be stored in
+  the PrivData, and instead configured using the attr.
+  Getting the ssh host key into the attr will allow automatically
+  exporting it via DNS.