Update notes for submitted changes

* Make token_format=PKI the default