Interestingly i started by testing the _stats API… and even though i have only granted READ permission on 2 indexes, _stats is returning the information for all indexes, is that expected with those new options set in config.yml? shouldnt i only see the 2 indexes?
…same for _cat/indices