enable security for spring-boot-actuator endpoints
add custom headers
add user agent