SERVER-12439 test that $where must be top level
SERVER-12560 Correct allowed sslMode options shown in help
SERVER-12561 Disallow clusterAuthMode and sslMode in --setParameter