Some of the auth options should be allowed on their own without having to use "setParameter": https://github.com/mongodb/mongo/blob/master/src/mongo/db/mongod_options.cpp#L476

These are the relevant options:

security.authenticationMechanisms
security.enableLocalhostAuthBypass