I would like enable the Spring Actuator features while allowing access only to certain client IDs (we use JWT based authentication). What is the best way to achieve this?