Fix links, streamline grammar, and other editorial changes

docs/java-rest/high-level/security/enroll_kibana.asciidoc

@@ -21,11 +21,12 @@ executed operation as follows:
 --------------------------------------------------
 include-tagged::{doc-tests}/EnrollmentDocumentationIT.java[{api}-response]
 --------------------------------------------------
-<1> The name of a token that can be used as a bearer token for the `elastic/kibana` service account.
-See link:/security/authentication/service-accounts.html#authenticate-with-service-account-token.html[Authenticate with service account tokens] for more information
-<2> The value of the aforementioned token.
-<3> The CA certificate used to sign the node certificates that {es} uses for TLS on the HTTP layer.
-The certificate is returned as a Base64 encoded string of the ASN.1 DER encoding of the certificate.
+<1> The bearer token for the `elastic/kibana` service account.
+Use this token to {ref}/service-accounts.html#authenticate-with-service-account-token[authenticate the service account] with {es}.
+<2> The value of the bearer token for the `elastic/kibana` service account.
+<3> The CA certificate used to sign the node certificates that {es} uses for TLS
+on the HTTP layer. The certificate is returned as a Base64 encoded string of the
+ASN.1 DER encoding of the certificate.
 
 
 [id="{upid}-{api}-execute-async"]

x-pack/docs/en/rest-api/security.asciidoc

@@ -140,7 +140,6 @@ include::security/clear-privileges-cache.asciidoc[]
 include::security/clear-api-key-cache.asciidoc[]
 include::security/clear-service-token-caches.asciidoc[]
 include::security/create-api-keys.asciidoc[]
-include::security/enroll-kibana.asciidoc[]
 include::security/put-app-privileges.asciidoc[]
 include::security/create-role-mappings.asciidoc[]
 include::security/create-roles.asciidoc[]
@@ -154,6 +153,7 @@ include::security/delete-service-token.asciidoc[]
 include::security/delete-users.asciidoc[]
 include::security/disable-users.asciidoc[]
 include::security/enable-users.asciidoc[]
+include::security/enroll-kibana.asciidoc[]
 include::security/enroll-node.asciidoc[]
 include::security/get-api-keys.asciidoc[]
 include::security/get-app-privileges.asciidoc[]

x-pack/docs/en/rest-api/security/enroll-kibana.asciidoc

@@ -39,11 +39,12 @@ The API returns the following response:
     "name" : "enroll-process-token-1629123923000", <1>
     "value": "AAEAAWVsYXN0aWM...vZmxlZXQtc2VydmVyL3Rva2VuMTo3TFdaSDZ" <2>
   },
-  "http_ca" : "MIIJlAIBAzCCCVoGCSqGSIb3....vsDfsA3UZBAjEPfhubpQysAICCAA=", <3>
+  "http_ca" : "MIIJlAIBAzVoGCSqGSIb3...vsDfsA3UZBAjEPfhubpQysAICAA=", <3>
 }
 ----
-<1> The name of a token that can be used as a bearer token for the `elastic/kibana` service account.
-See link:/security/authentication/service-accounts.html#authenticate-with-service-account-token.html[Authenticate with service account tokens] for more information
-<2> The value of the aforementioned token.
-<3> The CA certificate used to sign the node certificates that {es} uses for TLS on the HTTP layer.
-The certificate is returned as a Base64 encoded string of the ASN.1 DER encoding of the certificate.
+<1> The bearer token for the `elastic/kibana` service account.
+Use this token to {ref}/service-accounts.html#authenticate-with-service-account-token[authenticate the service account] with {es}.
+<2> The value of the bearer token for the `elastic/kibana` service account.
+<3> The CA certificate used to sign the node certificates that {es} uses for TLS
+on the HTTP layer. The certificate is returned as a Base64 encoded string of the
+ASN.1 DER encoding of the certificate.

x-pack/docs/en/rest-api/security/enroll-node.asciidoc

@@ -1,7 +1,7 @@
 [[security-api-node-enrollment]]
 === Enroll Node API
 ++++
-<titleabbrev>Enroll Node</titleabbrev>
+<titleabbrev>Enroll node</titleabbrev>
 ++++
 
 Allows a new node to join an existing cluster with security features enabled.

x-pack/docs/en/security/authentication/service-accounts.asciidoc

@@ -29,7 +29,9 @@ traditional roles
 
 Service accounts are not included in the response of the
 <<security-api-get-user,get users API>>. To retrieve a service account, use the
-<<security-api-get-service-accounts,get service accounts API>>.
+<<security-api-get-service-accounts,get service accounts API>>. Use the
+<<security-api-get-service-credentials,get service account credentials API>>
+to retrieve all service credentials for a service account.
 
 [discrete]
 [[service-accounts-explanation]]