anchor.diff:  |Value |Description
   | `off` |scripting is turned off completely, in the context of the setting being set.
   | `on`  |scripting is turned on, in the context of the setting being set.
  -| `sandbox` |scripts may be executed only for languages that are sandboxed (`mustache` and `expressions`)
  +| `sandbox` |scripts may be executed only for languages that are sandboxed
   |=======================================================================
   
   The default values are the following:
  
positive.code: inline scripts (even in a search request) or indexed scripts, then they have
  the same access to your box as the user that Elasticsearch is running as. For
  this reason dynamic scripting is allowed only for sandboxed languages by default.
  The script engines that currently support sandboxing are `mustache` and
  `expressions`.
  
  First, you should not run Elasticsearch as the `root` user, as this would allow
  a script to access or do *anything* on your server, without limitations. Second,
  
negative.code: 
  
  Additional `lang` plugins are provided to allow to execute scripts in
  different languages. All places where a `script` parameter can be used, a `lang` parameter
  (on the same level) can be provided to define the language of the
  script. The following are the supported scripting languages:
  
  [cols="<,<,<",options="header",]
  |=======================================================================
  |Language   |Sandboxed |Required plugin
  |groovy     |no        |built-in
  |expression |yes       |built-in
  |mustache   |yes       |built-in
  |mvel       |no        |https://github.com/elastic/elasticsearch-lang-mvel[elasticsearch-lang-mvel]
  |javascript |no        |https://github.com/elastic/elasticsearch-lang-javascript[elasticsearch-lang-javascript]
  |python     |no        |https://github.com/elastic/elasticsearch-lang-python[elasticsearch-lang-python]
  |=======================================================================
  
  To increase security, Elasticsearch does not allow you to specify scripts for
  non-sandboxed languages with a request. Instead, scripts must be placed in the
  