Documentation Request Summary:

This change adds a new actiontype, called 'setAuthenticationRestriction'. A user running createUser, updateUser, createRole, or updateRole with an authenticationRestriction must possess the actiontype, at least on the database the command is run on. It is provided on <db> by userAdmin@<db>, on all databases by userAdminAnyDatabase. It is transitively obtained by the restore and root roles.