Add ops, support groups

Both groups are given the vault-operator role which gives rights to run a rekeying process on vault and retrieve generated recovery keys.