Update notes for submitted changes

* Disable key injection by default.