To provide fine grained visibility of tracing information stored in Elasticsearch, protected using tools like SearchGuard, it would be useful if the OAuth bearer token for the authenticated user could be passed through the Query service to the ES storage plugin and then propagated to the ES cluster.

To enable users to disable the propagation, we should provide a flag (e.g. --bearer-token-propagation=true/false) with default true.