-* PostfixadminDb can be made a plugin -- prune just won't work without
- it.
-
-* Error reporting sucks, and when a domain or account doesn't exist we
- should be able to say so. The describe_domain/account functions
- should also work better. Depending on what we do in the first bullet
- point, they could either return a list of names, or
- NotImplementedError.
+* There is essentially no error handling. We report errors, but we
+ don't fail when we see one. The main reason for this is that we
+ don't know when each plugin will be run. If the first plugin
+ encounters an error, we could quit right there. But what if the
+ third one fails after the first two succeed? We would need some kind
+ of rollback mechanism.
+
+ For "mv", a rollback is conceivable. But with "rm", there's no going
+ back. Maybe relying on the user to interpret the output and go
+ fix stuff himself is the best we can do?
+
+* Add OpenDKIM support.
+
+* Write a man page.
+
+* Update the README.
+
+* Make a release.
+
+* Should we wrap all of the connection.close() calls in "ensure"?
+
+* Test deletion of a user "bar" who lies in the middle of a
+ goto="foo,bar,baz" alias.
+
+* Make sure removing a domain updates the aliases table correctly.
+
+* Factor out all of the msg-building in e.g. MvRunner.
+
+* Implement moving of domains.