Add CHANGELOG documenting the limits of the RoleAnnotation threat