Problem

With the project permission configured in the automation rule, project admin can still access to the System Admin user Authorization header information from the Send web request action:

But I am a sys-admin and can not deposit one my personal token in a project automation where every project admin can read my token and use it for some obscure operations. This is affects the security of our Jira instance.

Suggestion

It would be great if the whole automation rule configuration field was disabled to access or copy from it.

Another option would be to hide the automation rules without being seen under Project Settings > Project automation > list.