Update default tier zero

[JonasBK]

Description

Removes DCOM Users and Performance Log Users from default Tier Zero.

Motivation and Context

This PR addresses: BED-5183

We added these groups to default Tier Zero as a new attack revealed how they could compromise any user logged into DCs. Microsoft has now patched that (see end note): Hello: I’m your Domain Admin and I want to authenticate against you

How Has This Been Tested?

Locally.

Screenshots (optional):

Types of changes

• Chore (a change that does not modify the application functionality)

Checklist:

• I have met the contributing prerequisites
  • Assigned myself to this PR
  • Added the appropriate labels
  • Associated an issue: Issues and Pull Requests README #672
  • Read the Contributing guide: https://github.com/SpecterOps/BloodHound/wiki/Contributing
• I have ensured that related documentation is up-to-date
  • Open API docs
  • Code comments (GoDocs / JSDocs)
• I have followed proper test practices
  • Added/updated tests to cover my changes
  • All new and existing tests passed

[JonasBK]

Thanks @elikmiller!