diff --git a/src/upload-bot.rs b/src/upload-bot.rs
index 9782145..30a7ee0 100644
--- a/src/upload-bot.rs
+++ b/src/upload-bot.rs
@@ -15,6 +15,7 @@ mod db;
 
 fn main() {
     let args: Vec<_> = std::env::args().collect();
+    // WARNING: Never do this on a multiuser system, read from env variables instead!
     let api_token = match args.get(1) {
         Some(token) => token,
         None => {