SERVER-8368 Don't check authorization for deleting cursors while holding a mutex that is usually acquired after the DB level lock
SERVER-8389 Do auth checks for index builds up front, before any locks have been acquired