diff --git a/TODO b/TODO
index 1e5d8dc0f..5d8b23805 100644
--- a/TODO
+++ b/TODO
@@ -84,6 +84,9 @@ Command Line interface:
   * Add a file option so an argument may be read from a file. This is needed
     for cert-request to pass along the CSR.
 
+  * Replace RequiresRoot() with more fine-grained control based on the
+    files that need to be read/written
+
 
 Improve ease of plugin writting
   - make "from ipalib import *" import everything a plugin writter will need
diff --git a/ipalib/frontend.py b/ipalib/frontend.py
index aeae24ca0..27c856956 100644
--- a/ipalib/frontend.py
+++ b/ipalib/frontend.py
@@ -28,7 +28,7 @@ from plugable import lock, check_name
 from parameters import create_param, Param, Str, Flag, Password
 from util import make_repr
 
-from errors import ZeroArgumentError, MaxArgumentError, OverlapError
+from errors import ZeroArgumentError, MaxArgumentError, OverlapError, RequiresRoot
 from constants import TYPE_ERROR