searchguard.check_snapshot_restore_write_privileges: true is an option that enables restoring snapshots.
When searchguard.allow_default_init_sgindex is set to true, then the Search Guard index is initialized at the first Elasticsearch startup if such an index doesn’t exist. When the option is set to false, the Search Guard index must be initialized with sgctl.sh tool.