The documentation still mentioned that watches are running with elevated privileges, which is not true anymore since elastic/x-pack-elasticsearch#2808. Original commit: elastic/x-pack-elasticsearch@6b510d999a
Original commit: elastic/x-pack-elasticsearch@2dcbace8a0
Confirmed with @debadair, going ahead with merge Original commit: elastic/x-pack-elasticsearch@c510ddfe9e