anchor.diff:  [float]
   ==== 1.2.2
   
  +.bug fixes
   * The `esusers` tool no longer warns about missing roles that are properly defined in the `roles.yml` file.
   * The period character, `.`, is now allowed in usernames and role names.
   * The {ref}/query-dsl-terms-filter.html#_caching_19[terms filter lookup cache] has been disabled to ensure all requests
  
positive.code:   have been hashed with `bcrypt` and are not affected.
  
  .enhancements
  
  * TLS 1.2 is now the default protocol.
  * Clients that do not support pre-emptive basic authentication can now support both anonymous and authenticated access
    by specifying the `shield.authc.anonymous.authz_exception` <<anonymous-access,setting>> with a value of `false`.
  * Reduced logging for common SSL exceptions, such as a client closing the connection during a handshake.
  
  .bug fixes
  
  * The `esusers` and `syskeygen` tools now work correctly with environment variables in the RPM and DEB installation
    environment files `/etc/sysconfig/elasticsearch` and `/etc/default/elasticsearch`.
  * Default ciphers no longer include `TLS_DHE_RSA_WITH_AES_128_CBC_SHA`.
  
negative.code: [float]
  ==== 1.2.1
  
  .bug fixes
  * Several bug fixes including a fix to ensure that {ref}/disk.html[Disk-based Shard Allocation]
  works properly with Shield
  
  [float]
  ==== 1.2.0
  
  .enhancements
  * Adds support for Elasticsearch 1.5
  
  [float]
  ==== 1.1.1
  
  .bug fixes
  * Several bug fixes including a fix to ensure that {ref}/disk.html[Disk-based Shard Allocation]
  works properly with Shield
  
  