Update notes for submitted changes

* engine.clients always use keystoneclient auth_token