SERVER-11222 Refresh invalid users exactly once per command authorization check