[add] DisallowBearerToken option to operator to disallow bearer = true

change 1 out of 3 for nats-io/nats-server#3084

v2/operator_claims.go

@@ -45,6 +45,7 @@ type Operator struct {
 	AssertServerVersion string `json:"assert_server_version,omitempty"`
 	// Signing of subordinate objects will require signing keys
 	StrictSigningKeyUsage bool `json:"strict_signing_key_usage,omitempty"`
+	DisallowBearerToken   bool `json:"disallow_bearer,omitempty"`
 	GenericFields
 }