initial set of permission set for reader accounts

 available via rest resource because i don't want to hardcode everything right now.
 the web interface should not know what makes a reader a reader

issue Graylog2/graylog2-web-interface#175