Update notes for submitted changes

* Privilege checking for heat-keystone-setup-domain