diff --git a/manual_tests b/manual_tests
index af2e3ac..192ca2b 100644
--- a/manual_tests
+++ b/manual_tests
@@ -24,3 +24,6 @@ running app.. shouldn't grow the call stack either.
 
 == security/privacy
 program draws over menu -> getch -> Teliva menu is still visible
+
+TODO protect sensitive teliva files (teliva_edit_buffer, etc.)
+  should we protect .c sources?