[TEST] Improve ML security test comments and account for new close assertion

Original commit: elastic/x-pack-elasticsearch@004845bf2f

qa/smoke-test-ml-with-security/build.gradle

@@ -16,15 +16,15 @@ integTest {
   dependsOn copyMlRestTests
 }
 
-// remove tests that are expected to throw an exception, because we cannot then
-// know whether to expect an authorization exception or a validation exception
 integTestRunner {
   systemProperty 'tests.rest.blacklist', [
-    // TODO - review
-    'ml/jobs_crud/Test close job',
+    // Remove tests that need privileges beyond those in the standard ML roles - in
+    // particular, these two tests need cluster:admin/persistent/remove to directly
+    // remove persistent tasks
     'ml/jobs_crud/Test force close job',
     'ml/start_stop_datafeed/Test force stop datafeed',
-    // Non-temporary
+    // Remove tests that are expected to throw an exception, because we cannot then
+    // know whether to expect an authorization exception or a validation exception
     'ml/datafeeds_crud/Test delete datafeed with missing id',
     'ml/datafeeds_crud/Test put datafeed referring to missing job_id',
     'ml/datafeeds_crud/Test put datafeed with invalid query',

qa/smoke-test-ml-with-security/roles.yml

@@ -2,6 +2,7 @@ minimal:
   cluster:
     - cluster:monitor/health
     - cluster:monitor/main
+    - cluster:monitor/state
   indices:
     - names: '*'
       privileges: