Update 2.8 release notes for security backend (#2819)

Signed-off-by: Ryan Liang <[email protected]>

release-notes/opensearch-security.release-notes-2.8.0.0.md

@@ -9,6 +9,7 @@ Compatible with OpenSearch 2.8.0
 * Generate auth tokens for service accounts ([#2716](https://github.com/opensearch-project/security/pull/2716))
 * Security User Refactor ([#2594](https://github.com/opensearch-project/security/pull/2594))
 * Add score based password verification ([#2557](https://github.com/opensearch-project/security/pull/2557))
+* Usage of JWKS with JWT (w/o OpenID connect) ([#2808](https://github.com/opensearch-project/security/pull/2808))
 
 ### Bug Fixes
 
@@ -20,6 +21,8 @@ Compatible with OpenSearch 2.8.0
 * Add default roles for SQL plugin: PPL and cross-cluster search ([#2729](https://github.com/opensearch-project/security/pull/2729))
 * Update security-analytics roles to add correlation engine apis ([#2732](https://github.com/opensearch-project/security/pull/2732))
 * Changes in role.yml for long-running operation notification feature in Index-Management repo ([#2789](https://github.com/opensearch-project/security/pull/2789))
+* Rest admin permissions ([#2411](https://github.com/opensearch-project/security/pull/2411))
+* Separate config option to enable restapi: permissions ([#2605](https://github.com/opensearch-project/security/pull/2605))
 
 ### Maintenance