Description of problem:
Seccomp runtime/default does not work

Version-Release number of selected component (if applicable):
openshift v3.4.0.18+ada983f
kubernetes v1.4.0+776c994
etcd 3.1.0-rc.0

How reproducible:
Always

Steps to Reproduce:
1. configure the restricted SCC with:
seccompProfiles:
- runtime/default
2. oc login with normal user
3. create a pod 
oc create -f pod-sec-pod-default.yaml

cat pod-sec-pod-default.yaml
apiVersion: v1
kind: Pod
metadata:
  labels:
    name: pod-seccomp
  name: pod-seccomp-dafault-pod
  annotations:
    seccomp.security.alpha.kubernetes.io/pod: runtime/default
spec:
  containers:
    - image: "docker.io/deshuai/hello-pod:latest"
      imagePullPolicy: IfNotPresent
      name: hello-pod
      ports:
        - containerPort: 8080
          protocol: TCP
      resources: {}
      securityContext:
        capabilities: {}
        privileged: false
      terminationMessagePath: /dev/termination-log
      volumeMounts:
        - mountPath: /tmp
          name: tmp
  dnsPolicy: ClusterFirst
  restartPolicy: Always
  serviceAccount: ""
  volumes:
    - emptyDir: {}
      name: tmp
status: {}

Actual results:
[root@dhcp-128-70 seccomp]# oc create -f pod-sec-pod-default.yaml
The Pod "pod-seccomp-dafault-pod" is invalid: metadata.annotations.seccomp.security.alpha.kubernetes.io/pod: Invalid value: "runtime/default": must be a valid seccomp profile

Expected results:
pod created 
and default seccomp profile applied.
 
Additional info:
if docker/default used, it works.
Ref docs: https://docs.openshift.org/latest/admin_guide/seccomp.html