https://getsupport.atlassian.com/browse/PS-74718

According to the customer most organizations are seeing an HTTP Method other than Get/Head/Post as a vulnerability.
He wanted to suggest either disabling other methods or just exposure them after authenticating.