Update notes for submitted changes

* Revises section that advises an insecure method for configuring migrations