SERVER-88594 and SERVER-95919 made large strides towards ensuring all commands have authorization checks, but as far as I can tell we still don't enforce that all commands and new commands have authorization checks. We should ensure we're iterating through all commands and that they all have authorization checks in some test.