RBAC is spooooooky

In general it sure seems like the RBAC here is very wide open. However, it still gave me an error on creation of the servicemonitor that the operator tries to create when it runs. 

I think based on how open the RBAC cluster-level permissions are this is fairly un-usable from a security standpoint.  I did, however, go ahead and give it permissions to work with the servicemonitor object. 

