High:

 * debian/*.postinst.in: possibly unsafe handling of file, permissions
   should be set before sensible data is written to the file.
 * Rework conffile handling
   - Use ucf to handle conffiles
   - Guard calls to ucf / ucfr with checks for existence of ucf / ucfr
   - check that all conffiles are correctly owned by its package
   - maybe refer to old development git tag
     development/migrate-to-ucf-2012-06-07
 * Find a better solution to "rm -fr /etc/bacula" during purge of
   bacula-common:
     The problem: some bacula packages with conffiles are removed but
     not purged. If bacula-common is then purged, it deletes all the
     config files, even those owned by other, still unpurged
     packages. ucf will think the user deleted the config files, which
     leads to the situation that if bacula is now reinstalled, ucf
     will not reinstall the conffiles that it thinks the user deleted.

Normal:

 * Check if dh_exec can help us (architecture dependent *.install and
   renames while installing)
 * Check Depends on SQL-client-libraries, they might be obsoleted by dbconfig-*sql*
 * Check if bacula-director-pgsql suggesting postgresql-contrib is useful
 * Automatically detect the introduction of a new database version and
   warn or abort package build

Minor:

 * Migrate executables from bin to sbin to get to a state that's like
   an upstream install

Wishlist:

 * have upstream replace sha1.* with the public domain versions by Steve Reid
   https://anonscm.debian.org/cgit/pkg-ssh/openssh.git/tree/openbsd-compat/sha1.c
   https://anonscm.debian.org/cgit/pkg-ssh/openssh.git/tree/openbsd-compat/sha1.h
 * autopkgtests
 * running bacula-fd as non-root-user. See:
   http://www.bacula.org/7.4.x-manuals/en/main/New_Features_in_5_2_13.html#SECTION00658000000000000000
   https://lists.alioth.debian.org/pipermail/pkg-bacula-devel/2016-July/001536.html
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699149
 * convert debian/copyright into machine readable format
   use follow fragment in the headers
   Files-Excluded: src/lib/sha1.c
		   src/lib/sha1.h
   see: https://wiki.debian.org/UscanEnhancements

Review unmerged old changes:

 * Ask for passwords via debconf (git tag development/2011-04-29)
    d4676fc19978a0588bb09a58234cf451d15859d6 Don't set passwords at build time but ask for them
    aea2145a4f135fa6d18d33384a1af2c2bffc8617 Get rid of useless common-functions
