ENG-6858: Add default roles ADMINISTRATOR and USER.

The default roles cannot be disabled nor overriden by roles with the same name
in the DDL.

DON'T MERGE YET. Jenkins is still running tests. This is for review only.
You are right. They'll show up in the generated DDL as well. I probably have to hide them.