Update notes for submitted changes

* Pass full principal when creating a kerberos AP_REQ