The option `[token] infer_roles=False` is being deprecated in
favor of always expanding role implications during token
validation.
Default roles depend on a chain of implied role assignments.
Ex: an admin user will also have the reader and member role.
By ensuring that all these roles will always appear on the
token validation response, we can improve the simplicity and
readability of policy files.
blueprint deprecated-as-of-rocky
Change-Id: Id36c5b8f6a92f5f3e42e4bcedc3e2dd64eaeb130
b874977455