Update notes for submitted changes

* Do not defer IPTables apply in firewall path