As we now use admin roleRef (previously edit) there will be existing SA
rolebindings that need to be updated.