Update notes for submitted changes

* Move `mask_password` to strutils