Update notes for submitted changes

* Allow keystone_config hide config values from Puppet logs