Added `action.destructive_all_indices` that controls whether certain operations are allows on all existing indices.

The current default is `disallow` for destructive operations (delete index, close index etc). Maybe `allow_if_stated` should be the default? So only when implicitly all indices have been specified destructive operations fail, but when explicitly all indices are specified (e.g. via `_all` or `*`)  we don't fail.

Relates #4549 #4481