More TODO about python-related security stuff