Update notes for submitted changes

* Keystone doesn't depend on bcrypt any more