bast1001 to admin yaml

This includes stuff needed elsewhere:

    include admins::roots
    include admins::mortals
    include admins::restricted
    include admins::bastion

Change-Id: Ic774e858b9aa58d32787068ee1cacd3c397336a9