https://www.haktechs.com/gitlab-fixed-elasticsearch-api-flaw-that-could-expose-private-groups/