Update notes for submitted changes

* Don't expose password in heat-keystone-setup-domain logs