some xxx's for future privsep cleanup
diff --git a/auth1.c b/auth1.c
index 06b6712..2ebc8d0 100644
--- a/auth1.c
+++ b/auth1.c
@@ -324,6 +324,7 @@
 
 		if (authctxt->failures++ > AUTH_FAIL_MAX) {
 #ifdef WITH_AIXAUTHENTICATE
+			/* XXX: privsep */
 			loginfailed(authctxt->user,
 			    get_canonical_hostname(options.verify_reverse_mapping),
 			    "ssh");