Increase log level for unauthorized API access attempts

[legrego]

Currently, we emit a debug log message whenever an under-privileged user attempts to access an API endpoint:

kibana/x-pack/plugins/security/server/authorization/api_authorization.ts

Line 41 in 77fe83e

logger.debug(`not authorized for "${request.url.path}"`);

To assist in debugging authorization issues, it would be helpful if we could increase this to something that would be logged by default (perhaps info or warn). This should not be logged all that often under normal operating conditions, so IMO there is little risk to increasing this.

If a setup is seeing this log message spammed, then there is an authorization issue that should be addressed.

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)