You may want to check out this earlier posting on the same topic:
Note the links to the SearchGuard documentation in my response that may be helpful as well.