Update notes for submitted changes

* Make sure scoping to the project of a disabled domain result in 401.