Data distrbution REST API does provide the good security context through SecuredActions, so the REST API fails to load the data distribution "null lacks monitor permission". This error can be reproduced from the console metrics page that shows broken "Data for nodes" view for local secured cache. See the screenshots.

So as you can see form the screenshot, I am logged in with admin user, the cache is secured for admin user but still the view is broken.