Add TODO about manifest tampering test