Implement riak security enable/disable/status

Implemented in terms of a cluster_metadata modulated capability.

I'm not actually sure this yields the right semantics. On the one hand it makes sure that the status of security across the cluster is consistent, but on the other it means that if you join one old (or malicious) node to the cluster, your security goes bye-bye.