In 9.0, all the Security APIs should be accessed through Core. These things should be done before 9.0, so that backporting the future fixes doesn't become a pain.
I assume there are hits in both the alerting and actions plugins, I think they can be made at the same time.
From issue: https://github.com/elastic/kibana/pull/187020
I assume there are hits in both the alerting and actions plugins, I think they can be made at the same time.