Aggregates are complex beasts: they can find data, delete it and even export it to AWS. Right now, with the current permissions, the user can just do everything inadvertently, because there is a single command for that and it's not marked as a destructive and openWorld operation.

We will need to split the aggregate tool as 2 different tools:

• aggregate-find, that disables modifying operators, like $merge, $out.
• aggregate-destructive, that enables all modifying operators, like $merge and $out. This one would be marked as destructive and openWorld, as $out in Atlas can output data in a S3 bucket.