Add 0.10 release notes on improvement to signing security.

I dropped mention of libgmp that I had in my first draft because
it looks like we'll be able to get that out prior to release.