allow /_api/logs only for the `_system` database