Security should audit when no indices are resolved #30026
Description
Original comment by @jaymode:
I was looking through our code due to a question asked by a user, https://discuss.elastic.co/t/curator-delete-indices-shield-permissions/29354/2 on the discussion forums and noticed that when we throw an IndexMissingException (user is not authorized for any indices) that we don't have a corresponding audit event. This should probably be a access_denied event...