code: func (f *aclFilter) filterHealthChecks(checks *structs.HealthChecks) {
  	hc := *checks
  	for i := 0; i < len(hc); i++ {
  		check := hc[i]
  		if f.allowNode(check.Node) && f.allowService(check.ServiceName) {
  			continue
  		}
  		f.logger.Printf("[DEBUG] consul: dropping check %q from result due to ACLs", check.CheckID)
  		hc = append(hc[:i], hc[i+1:]...)
  		i--
  	}
  	*checks = hc
  }
docs: // filterHealthChecks is used to filter a set of health checks down based on
  // the configured ACL rules for a token.