When adding a `security-role` using the CLI or API, it was required that the user specify both the roles that it should have, and all the roles that it should not. This was because the `:add` operation for this resource did not have default values for these parameters. These parameters now default to `false`. Adding a role now only requires that you specify the roles that the security-role must have by setting them to `true`. All other roles default to `false`.