Update notes for submitted changes

* selinux: Use a more reliable sentinel to flag /data labelling