Update notes for submitted changes

* Rename 'sid' to 'user' in access rules and sec services