RHOSO (18.0) will have Secure RBAC enabled by default. We will no longer rely on custom policies to enable SRBAC.

Ensure that both `enforce_new_defaults=True` and `enforce_scope=True` by default.