Update notes for submitted changes

* recovery: don't overallocate for get_android_secure_path