Stronger message about security risk when running with ES http enabled