Update notes for submitted changes

* Redefine instance.security_groups as list