yeah, extra complication with things like that is how do you secure it. obviously in the end its up to teh user to not do silly things like post potentially sensitive data via HTTP to elasticsearch...but...