Make sure userAdminAnyDatabase can actually run invalidateUserCache
SERVER-11858 Make sure to invalidate the user cache on any role manipulation
Make changeOwnCustomData privilege target the user's database rather than the cluster