trust.subject_name:
  - "*.elasticsearch"
