Seems it contains entries originating from Search Guard 5 which is not longer supported (format wise).
The entries have to look like:
UNLIMITED:
permissions:
- "*"
and NOT like
UNLIMITED:
- "*"
So at least TEMPLATE_ALL seems to be an “old” entry