Update notes for submitted changes

* Don't expose X-Auth-Token in ceilometer CLI