Update TODO

sub-CA support works
add in need to fix up exit codes