Currently, if ES security is enabled but TLS is disabled, we disable the entire Rules & Connectors UI and rule flyouts so users cannot create rules from the UI. Creating rules from the API returns an error. This issue is to discuss whether we should allow users to create the rule but only as disabled (which doesn't require API key creation).