diff --git a/doc/release_notes.md b/doc/release_notes.md
index b930b35..896c8c1 100644
--- a/doc/release_notes.md
+++ b/doc/release_notes.md
@@ -1,5 +1,16 @@
 # Release Notes
 
+## Untagged
+
+### User Supplied Secret - Breaking change!
+
+*Nota bene* From commit 99efb78ed8ba69799045cff6c42c4a71bffdb703 the
+computed CDI secret is also taking the User Supplied Secret into
+account *even if the USS is not supplied*! This means if you start
+using firmware from this commit and onwards your CDI and with it the
+private key of the signerapp will change even if you haven't changed
+the app in any way.
+
 ## engineering-release-1
 
 ### Hardware
diff --git a/hw/application_fpga/fw/mta1_mkdf/README.md b/hw/application_fpga/fw/mta1_mkdf/README.md
index 85b66a5..c563456 100644
--- a/hw/application_fpga/fw/mta1_mkdf/README.md
+++ b/hw/application_fpga/fw/mta1_mkdf/README.md
@@ -5,8 +5,8 @@
 You need Clang with 32 bit RISC-V support. You can check this with:
 
 ```
-  $ llc --version|grep riscv32
-      riscv32    - 32-bit RISC-V
+$ llc --version | grep riscv32
+    riscv32    - 32-bit RISC-V
 ```
 
 or just try building.
@@ -24,18 +24,21 @@ Checkout the `mta1` branch of [our version of the
 qemu](https://github.com/tillitis/qemu) and build:
 
 ```
-  $ git clone -b mta1 https://github.com/tillitis/qemu
-  $ mkdir qemu/build
-  $ cd qemu/build
-  $ ../configure --target-list=riscv32-softmmu
-  $ make -j $(nproc)
+$ git clone -b mta1 https://github.com/tillitis/qemu
+$ mkdir qemu/build
+$ cd qemu/build
+$ ../configure --target-list=riscv32-softmmu --disable-werror
+$ make -j $(nproc)
 ```
 
+(Built with warnings-as-errors disabled, see [this
+issue](https://github.com/tillitis/qemu/issues/3).)
+
 Run it like this:
 
 ```
-  $ /path/to/qemu/build/qemu-system-riscv32 -nographic -M mta1_mkdf,fifo=chrid -bios firmware \
--chardev pty,id=chrid
+$ /path/to/qemu/build/qemu-system-riscv32 -nographic -M mta1_mkdf,fifo=chrid -bios firmware.elf \
+  -chardev pty,id=chrid
 ```
 
 This attaches the FIFO to a tty, something like `/dev/pts/16` which
diff --git a/hw/application_fpga/fw/mta1_mkdf/main.c b/hw/application_fpga/fw/mta1_mkdf/main.c
index ad5b7be..630f3b2 100644
--- a/hw/application_fpga/fw/mta1_mkdf/main.c
+++ b/hw/application_fpga/fw/mta1_mkdf/main.c
@@ -83,7 +83,7 @@ int main()
 
 	for (;;) {
 		// blocking; fw flashing white while waiting for cmd
-		in = readbyte_ledflash(LED_RED | LED_BLUE | LED_GREEN, 500000);
+		in = readbyte_ledflash(LED_RED | LED_BLUE | LED_GREEN, 800000);
 
 		if (parseframe(in, &hdr) == -1) {
 			puts("Couldn't parse header\n");