SERVER-10670 Encode role and user names into _id fields of privilege documents.