Don't let user auth to nonexistent coll.
Allow user to coll-create on current realm/collset.
TODO comment on audit log.