Update notes for submitted changes

* jf-common: only build selinux in kernel if we want it