Add exclusive access files for security module

This commit fills out missing entitlements for the security module.
Specifically they are config files which require exclusive access.

Author: rjernst

x-pack/plugin/security/src/main/plugin-metadata/entitlement-policy.yaml

@@ -4,6 +4,37 @@ org.elasticsearch.security:
       - relative_path: ""
         relative_to: config
         mode: read
+      - relative_path: users
+        relative_to: config
+        mode: read
+        exclusive: true
+      - relative_path: x-pack/users
+        relative_to: config
+        mode: read
+        exclusive: true
+      - path_setting: xpack.security.authc.realms.ldap.*.files.role_mapping
+        basedir_if_relative: config
+        mode: read
+        exclusive: true
+      - path_setting: xpack.security.authc.realms.pki.*.files.role_mapping
+        basedir_if_relative: config
+        mode: read
+        exclusive: true
+      - path_setting: xpack.security.authc.realms.kerberos.*.keytab.path
+        basedir_if_relative: config
+        mode: read
+        exclusive: true
+      - path_setting: xpack.security.authc.realms.jwt.*.pkc_jwkset_path
+        basedir_if_relative: config
+        mode: read
+        ignore_url: true
+        exclusive: true
+      - path_setting: xpack.security.authc.realms.saml.*.idp.metadata.path
+        basedir_if_relative: config
+        mode: read
+        ignore_url: true
+        exclusive: true
+
 io.netty.transport:
   - manage_threads
   - inbound_network