refactor applies_to info in security-privileges.md

[shainaraskas]

https://www.elastic.co/docs/reference/elasticsearch/security-privileges

this page has a lot of applicability info but it's all written in different ways. we should standardize it so the page is easier to use