Hide the information file?

This file does indeed not contain sensitive data. It is here to assure best operational experience though people are around who challenge this assessment, but this is another story. Anyhow, if you would like the file to be protected additionally when you can indeed do this on web server level. This can very well be documented here. Same goes for the "elasticsearch.profile.json" file if you are using this.

[[kgh]] (talk)