kibana: add access for ldap groups ops and nda

this is logstash

As the wmf is organisation specific and others also need access, the
restriction should be replaced with the groups ops and nda. The group nda was
newly created for cases like this. This still retains access for the wmf group
because we don't know who from that group needs access.

RT: 7724

Change-Id: I0a41ba0dbbfcb3a7e887d9e4d843350ae23bb134
Merge "kibana: add access for ldap groups ops and nda" into production