Add default roles and permissions for HBAC, SUDO and pw policy
    
    Created some default roles as examples. In doing so I realized that
    we were completely missing default rules for HBAC, SUDO and password
    policy so I added those as well.
    
    I ran into a problem when the updater has a default record and an add
    at the same time, it should handle it better now.
    
    ticket 585