OK, lets do: 

/v1/keys/sys/machines and make it read only.

then

/v1/watch/sys/machines should work