Update notes for submitted changes

* expires_at should be in a tuple not turned into one
Update notes for submitted changes

* Filter LDAP dumb member when listing role assignments