Password protect ES endpoints as well.