Update notes for submitted changes

* Whitelist external lazr.authentication requirement