SERVER-6246 Forbid direct inserts and updates to system.users collections when auth is enabled