Update notes for submitted changes

* Backport: PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs