Update notes for submitted changes

* Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs