Remove the global anonymous read ACI
    
    Also remove
    - the deny ACIs that implemented exceptions to it:
      - no anonymous access to roles
      - no anonymous access to member information
      - no anonymous access to hbac
      - no anonymous access to sudo (2×)
    - its updater plugin
    
    Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
    
    Reviewed-By: Martin Kosek <mkosek@redhat.com>