Core authentication and security features in Elasticsearch have been free and not Enterprise features since last May:
https://www.elastic.co/blog/security-for-elasticsearch-is-no...
Free for some to use under certain restrictions. Therefore not Open Source (which is totally OK, I just want to make sure there's no confusion).