Update notes for submitted changes

* Making passwords a first-order configuration.