diff --git a/cli/README.md b/cli/README.md
index bcaf9b3117639a0281ad4b306ed6c1aa47f1694a..9d248b3d54beacb30133528d2a6a3f79975fb17a 100644
--- a/cli/README.md
+++ b/cli/README.md
@@ -24,3 +24,11 @@ Motivation
 ---
 
 The container and Kubernetes ecosystem is switching its  toolchain quite quickly. As a result these tools are all litered across the workstation. To make things worse, a lot of these tools are not properly packaged and therefore not signed or verified in any way. Not necessarily something you want to let loose on your home directory. The idea with koolbox is to keep the Kubernetes tools confied and easily removable using just containers.
+
+Ideas & ToDos
+---
+
+- Move secrets into the system secret store using `secret-tool`
+- Store secrets in `pass`
+- Figure out how to properly pass smartcards & gnupg in general into the koolbox container
+- Make CLI more universal for non-Fedora systems