add a todo about removing dbus support

can't be done without impairing compatibility just now since we kind of
treat the dbus api like part of the public api, what with