Fixed default policy syntax
Fixed default policy regos: (1) search.rego: handle more generic case for a user who is in acl.owner group but not in acl.viewer group. (this is an overlook when we updated it for syntax error a few days ago) (2) nonexpired.rego (syntax error): the 'expired' flag is always false even for an expired legaltag.