You cannot set slaveOk on the connection between the server and the secondary from which it would clone the database.

There is testing in place for this in jstests/replsets/cloneDb.js, which should be uncommented upon completion of this ticket.