Update notes for submitted changes

* Allow token signing key/cert/cacert to be pulled in remotely