GitLab patches Elasticsearch private group data leak bug

Public group projects made private were still searchable via an API.