Summary

In 2.4 we introduced new RBAC for logs. In 2.5, we should enable that enforcement by default as promised in the 2.3 -> 2.4 upgrade guide.

Motivation

We said we'd do it. :-)

Proposal

Set the flag to true by default, and add a note to the 2.4 -> 2.5 upgrade notes.