General RBAC security profile for 2.4.x servers?