Unauthorized team members can leak information and see all API calls through /1/admin/* endpoints, even after they have been removed.

Invited team members or collaborators on https://www.algolia.com/manage/applications/[APP_ID]/team can use the `/1/admin/*` REST endpoints to leak some information, which they should not be able to have access to.

POST /1/admin/listindexes HTTP/1.1
Host: c5-eu-1.algolianet.com
....

{"applicationID":"APP_ID","signature":"SIGNATURE","page":0,"sortByNbEntries":1}