Hello Joe, sorry the delayed response on this. I just tested this in our demo environment. You are right, something is missing when X-Pack code uses the saved objects API. ROR should intercept that too. Will have a look on how to ensure all the calls to the saved objects API are covered.