Add some TODOs to hacking.md