Update notes for submitted changes

* Crypto dev plugin now uses per-tenant KEKs