Update notes for submitted changes

* Explicitly setting of PKI token signing cert