Disable dynamic querys by default, to avoid remote code execution. 

Elasticsearch defaults to support dynamic querys, which introduces a risk for remote code execution. This is supposedly disabled by default in newer versions of ES, but for now, I suggest setting it to false in the default configuration is better than nothing.

For more information, please see http://bouk.co/blog/elasticsearch-rce/

Br,
Jan