Update notes for submitted changes

* DNSSEC: separate private key structure from signing context