Acceptance Criteria (Required on creation):

• For the H2 webapp, the servlet attribute webAllowOthers is set to false so that only localhost connections can use the application
• Patch and minor version update guide mention this change

Hints (optional):

• https://github.com/camunda/camunda-bpm-platform/blob/7.17.0-alpha3/distro/h2-webapp/src/main/webapp/WEB-INF/web.xml#L14-L17
• https://h2database.com/html/tutorial.html#console_settings
• As a side effect, h2 console will not be accessible when running the Tomcat or Wildfly Docker containers, because HTTP requests to those are remote requests from the container's point of view