Security Admin cannot add any admin roles, just bucket roles

Create a user 'joe' as security admin. 

Log in as user joe, and go to security tab, and create a user 

Notice that the roles that can be assigned are only bucket roles and not other admin roles

security admin should be able to create a user and assign it one of the admin roles (except full admin, and security admin)