diff --git a/domain/secret/service/service.go b/domain/secret/service/service.go
index ca96888f7a8..d6e6fe63e5f 100644
--- a/domain/secret/service/service.go
+++ b/domain/secret/service/service.go
@@ -308,6 +308,7 @@ func (s *SecretService) UpdateUserSecret(ctx context.Context, uri *secrets.URI,
 		// loadBackendInfo will error is there's no active backend.
 		backend := s.backends[s.activeBackendID]
 
+		// TODO: use a bespoke "GetLatestRevision(ctx, uri) method instead of GetSecret().
 		md, err := s.GetSecret(ctx, uri)
 		if err != nil {
 			// Check if the uri exists or not.