Security subsystem transformers for 1.1.0 do not reject expressions, or test for it

Getting it to test for it is going to be a bit different than the usual RejectExpressionsConfig. The add handler transformers (correctly from what I can tell) use the existing child xxx-module resource to create the transformed add operation.

However, I think with the ModelTestUtils.checkFailedTransformedBootOperations() stuff set up the way it is the child resource/model used to populate the ops. A possible solution is to override the RejectExpressionsConfig to correct the main model as part of correcting the ops.