A 4.1.4 release notes update

Author: michaelklishin

release-notes/4.1.4.md

@@ -88,6 +88,15 @@ Release notes can be found on GitHub at [rabbitmq-server/release-notes](https://
 
 #### Bug Fixes
 
+ * Stream client connections that authenticate using a JWT token (OAuth 2) have
+   to periodically renew their JWT tokens. Should such an update fail,
+   the RabbitMQ Stream Protocol connection will be immediately closed.
+
+   In addition, stream connections now verify that the newly obtained JWT
+   token still grants access to the virtual host the client is connected to.
+
+   GitHub issues: [#14403](https://github.com/rabbitmq/rabbitmq-server/pull/14403), [#14406](https://github.com/rabbitmq/rabbitmq-server/pull/14406)
+
  * If a Single Active Consumer could not leave its SAC group because the stream
    coordinator was not available, the operation will now be retried a few times
    before reporting a failure back to the client.