v5.0.11

Enhancements

Security enhancement for retained messages #9326. The retained messages will not be published if the publisher client is banned.
Security enhancement for the subscribe API #9355.
Enhance the banned feature #9367. Now the corresponding session will be kicked when client is banned by clientid.
Redesign /gateways API 9364. Use PUT /gateways/{name} instead of POST /gateways, gateway gets 'loaded' automatically if needed. Use PUT /gateways/{name}/enable/{true|false} to enable or disable gateway. No more DELETE /gateways/{name}.
Improve node name generation rules to avoid potential atom table overflow risk #9387.

Return 404 for status of unknown authenticator in /authenticator/{id}/status #9328.
Fix that JWT ACL rules are only applied if an exp claim is set #9368.