Since x509Username can include special characters such as `:` we should use percent-encoding to distinguish a delimiter from the part of the username component. Otherwise a part of the username that follows `:`  will be parsed by the driver as a password. And the password is not allowed for the `MONGODB-X509` mechanism.