doc: mention stricter caps checking in PendingReleaseNotes

Signed-off-by: Nathan Cutler <ncutler@suse.com>

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index 383ea6c1bd6a50c7b81c154324b388e2624c762c..5e1c34f3b820ba3c43beaf0adddb22295b478cfa 100644 (file)
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -28,3 +28,7 @@
   develop. The new option client_die_on_failed_dentry_invalidate (default:
   true) may be turned off to allow the client to proceed (dangerous!).
 
+* In 10.2.10 and earlier releases, keyring caps were not checked for validity,
+  so the caps string could be anything. As of 10.2.11, caps strings are
+  validated and providing a keyring with an invalid caps string to, e.g.,
+  "ceph auth add" will result in an error.