Update notes for submitted changes

* Mark password config options with secret