Update notes for submitted changes

* Mark sensitive cfg options with secure flag