Update notes for submitted changes

* py33: don't encode security_group