update note for why role/environment default/override attribute order is reversed