Update notes for submitted changes

* Add security API draft