Update notes for submitted changes

* Make strutils.mask_password more secure