Address review comments

Author: n1v0lg

x-pack/plugin/security/qa/security-trial/src/javaRestTest/java/org/elasticsearch/xpack/security/failurestore/FailureStoreSecurityRestIT.java

@@ -1290,7 +1290,7 @@ public void testFailureStoreAccess() throws Exception {
                             request,
                             containsString(
                                 "this action is granted by the index privileges [read,all] for data access, "
-                                    + "or by [read_failure_store] for access with the [failures] selector"
+                                    + "or by [read_failure_store] for access with the [::failures] selector"
                             )
                         );
                         break;
@@ -2272,7 +2272,7 @@ private static void expectThrows(ThrowingRunnable runnable, int statusCode) {
     }
 
     private void expectThrowsUnauthorized(String user, Search search, Matcher<String> errorMatcher) {
-        ResponseException ex = expectThrows(ResponseException.class, () -> performRequest(user, search.toSearchRequest()));
+        ResponseException ex = expectThrows(ResponseException.class, () -> performRequestMaybeUsingApiKey(user, search.toSearchRequest()));
         assertThat(ex.getResponse().getStatusLine().getStatusCode(), equalTo(403));
         assertThat(ex.getMessage(), errorMatcher);
     }

x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authz/AuthorizationDenialMessages.java

@@ -130,7 +130,7 @@ public String actionDenied(
                         message = message
                             + " for data access, or by ["
                             + collectionToCommaDelimitedString(privilegesForFailuresOnly)
-                            + "] for access with the [failures] selector";
+                            + "] for access with the [::failures] selector";
                     }
                 }
             }

x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/AuthorizationDenialMessagesTests.java

@@ -255,7 +255,7 @@ public void testActionDeniedWithFailuresAndCorrectActionIncludesFailuresMessage(
                 denialMessages.actionDenied(authentication, null, action, request, null),
                 endsWith(
                     "this action is granted by the index privileges [read,all] for data access, "
-                        + "or by [read_failure_store] for access with the [failures] selector"
+                        + "or by [read_failure_store] for access with the [::failures] selector"
                 )
             );
         }