RBAC Migration Followup #8: Remove policy from bootstrap policy

[enj]

Remove policy objects from bootstrap roles

[simo5]

@enj, we need more context here for people to be able to pick this up and do something.

[enj]

Our bootstrap auth policy most likely still grants users access to {cluster}policy{binding} objects. We need to scrub the code for these policy rules and remove them since the endpoints no longer exisit. An example that uses an RBAC builder (origin has something similar which we may be able to delete, and rules can also be created manually so some regex foo may be require to make sure everything has been cleaned up):

rbac.NewRule(...).Groups(...).Resources("policybindings").RuleOrDie()