expose user/pass
mongo authentication
trusted mongo conf