Add CHANGES entry for Kerberos removal