Update notes for submitted changes

* Use hashed token for invalid PKI token cache key