diff --git a/debian/design.md b/debian/design.md
index 4b68b2d..9d124bd 100644
--- a/debian/design.md
+++ b/debian/design.md
@@ -234,6 +234,13 @@ One possibility would be to introduce a file `/etc/default/patroni` where the
 DCS and it's ip-address(es) could be configured which could be sourced by the
 configuration file generator.
 
+Security
+--------
+
+The proposed/current setup should be considered a Proof of Concept. In
+particular, care must be taken that the postgres db/system user password is not
+leaked and that the DCS access is secured/hardened.
+
 Making `patronictl` pg-common aware
 -----------------------------------