Update notes for submitted changes

* Mark auth plugin options as secret