http://docs.mongodb.org/manual/reference/configuration-options/ says that the option to turn security on is called security.authentication. That was true in rc2. It got changed to security.authorization in RC3. Its values are different too — the correct values are "enabled" and "disabled". I don't know what, if anything, happened to "allowSSL"

I'm sorry, but I don't if there are any subtleties or further confusions here. Better check with someone who actually built it.