Make security a mandatory crd field

[chatton]

All Submissions:

• Have you signed our CLA?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• Put closes #XXXX in your comment to auto-close the issue that your PR fixes (if such).

closes #178

Users is a mandatory field under spec.security.users but spec.security itself was not mandatory, meaning if you remove security the CRD is successfully validated and there will be errors when operator attempts to update the resource during reconciliation.

[rodrigovalin]

LGTM