diff --git a/TODO b/TODO
index 719bf29879..ad902f0736 100644
--- a/TODO
+++ b/TODO
@@ -253,9 +253,6 @@ Features:
   processes with varlink communication over socketpair(). This all should be
   useful as blueprint for graphical installers which should do the same.
 
-* make "systemd-vmspawn -n" work unprivileged properly, i.e. acquire tap netif
-  from nsresourced.
-
 * Make run0 forward various signals to the forked process so that sending
   signals to a child process works roughly the same regardless of whether the
   child process is spawned via run0 or not.