Update notes for submitted changes

* VPNaaS: separate out validation logic for ref impl