Update notes for submitted changes

* Pass base64-encoded CA certificate to cloud-init script