Steps to reproduce
Perform a GET request for an enterprise template without a http header for authorised engines (X-Authorized-Engine).

Problem
Enterprise templates are exposed if license is missing / invalid

Reason
When http header for authorised engines is not set, templates are exposed if license is missing

Impact
No impact – just strange.

Hint
See https://github.com/camunda/camunda-bpm-platform-ee/blob/master/webapps/camunda-webapp/plugins/src/main/java/org/camunda/bpm/webapp/impl/plugin/LicenseCheckResourceOverride.java#L84-L90