It would be nice if there was a way to easily make POST requests to actuator endpoints without needing to disable CSRF protection.

See #24611 for background.