feat(auth): add security rules for plugin api

related to #CAM-1003
Merge branch 'master' of github.com:camunda/camunda-bpm-platform