Enable NGAC by default to be able to showcase the application security features

[nacx]

FWIW, done in my fork: nacx@d7ede66

[smarunich]

@nacx for the team and my own understanding when we enable it... what actually will change from the existing rules? do we affect existing functionality?

[nacx]

Let's hold on this for now, as it will become enabled by default soon (for 1.7 policies we'll start enforcing via NGAC)
Currently it only makes the Application stuff work with he approvals stuff, but there is no need to do changes here if we're going to remove the ability to disable it soon.

[smarunich]

sounds good