vs: new initVCs and trackOplog2
vs: new _verifyAuthRequest and _handleIncomingAuthReq