title: Can't get spring-boot /health indicator to display full content
body: <p>Trying to get the full content of the /health endpoint. I've set the following:</p>
  
  <pre><code>endpoints.health.sensitive=true
  management.security.enabled=true
  </code></pre>
  
  <p>and I'm successfully authenticating (earlier, to gain access to the endpoint in the first place), as shown by the log snippet below:</p>
  
  <pre><code>2016-11-06 10:48:18,936 [XNIO-3 task-1]DEBUG o.s.c.e.PropertySourcesPropertyResolver - Found key 'endpoints.health.sensitive' in [applicationConfig: [classpath:/application.properties]] with type [String] and value 'true'
  2016-11-06 10:48:19,109 [XNIO-3 task-1]DEBUG o.s.s.w.h.writers.HstsHeaderWriter - Not injecting HSTS header since it did not match the requestMatcher org.springframework.security.web.header.writers.HstsHeaderWriter$SecureRequestMatcher@4542ffee
  2016-11-06 10:48:19,109 [XNIO-3 task-1]DEBUG o.s.s.w.c.HttpSessionSecurityContextRepository - SecurityContext 'org.springframework.security.core.context.SecurityContextImpl@760f603a: Authentication: org.springframework.security.authentication.UsernamePasswordAuthenticationToken@760f603a: Principal: org.springframework.security.ldap.userdetails.LdapUserDetailsImpl@375540cb: ......; Enabled: true; AccountNonExpired: true; CredentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: ......; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@b364: RemoteIpAddress: 0:0:0:0:0:0:0:1; SessionId: null; Granted Authorities: .....' stored to HttpSession: 'io.undertow.servlet.spec.HttpSessionImpl@768a4e99
  2016-11-06 10:48:19,148 [XNIO-3 task-1]DEBUG o.s.w.s.m.m.a.RequestResponseBodyMethodProcessor - Written [UP {}] as "application/json" using [org.springframework.http.converter.json.MappingJackson2HttpMessageConverter@eae8a50]
  </code></pre>
  
  <p>But one can see by the last line that I'm only being shown the "non-sensitive" information (there are db connections in the app which show up if I set both of the spring-boot properties to false.</p>
  
  <p>From what I've read, the db status should be displayed.</p>
  
  <p>What am I missing?</p>