Github user mcgilman commented on the issue:
https://github.com/apache/nifi/pull/2167
That is correct. Knowledge of the components (UUID, status, etc) is
allowed. Knowledge of what those components are/how they are configured is not.---
