Now that we have the application privileges in place, and we're reviewing elastic/kibana#19723 , we'll want to switch the kibana_user and kibana_dashboard_only_user roles to utilize the new application privileges and no longer have direct access to the .kibana* indices.

We'd like the kibana_user role to have the all privilege on * resources; and the kibana_dashboard_only_user role to have the read privilege on * resources.

It should be noted that we won't want to merge this change until elastic/kibana#19723 merges, or else we risk making existing users with the kibana_user roles non-functional.