If I add a user to the admin database with read-only set to true, you cannot use that user to connect to other databases.

This would be ideal for running backups, especially since I would have to include the username and password in the script that runs mongodump.