[WFLY-1618] / [WFLY-490] Add validation based on an enumeration to the PrincipalResourceDefintion.

Also make the attributes on PrincipalResourceDefinition read only - i.e. principals can be added to or remove from the include / exclude list but existing definitions can not be modified.