title: Spring Boot Actuator - Endpoint sensitivity vs security enablement
body: <p>I've been reading up on the spring boot actuator and I'm having a hard time distinguishing between two application.properties settings</p>
  
  <p><code>endpoints.sensitive</code> vs <code>management.security.enabled</code></p>
  
  <p>I want to customize the access rules of the actuator endpoints.  I can control all <a href="https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-endpoints.html#production-ready-customizing-endpoints" rel="nofollow noreferrer">actuator endpoint sensitivity</a> using the <code>endpoints.sensitive</code> property.  My understanding is that a sensitive endpoint will require authorization. I can also <a href="https://docs.spring.io/spring-boot/docs/current/reference/html/production-ready-monitoring.html#production-ready-sensitive-endpoints" rel="nofollow noreferrer">change the accessibility</a> of the endpoints via the <code>management.security.enabled</code> property.  </p>
  
  <p>What's the distinction between the sensitivity controls and the security enablement?  </p>