As part of liveness detection, the internal replication use of the find and getMore commands can pass a term number as part of the request metadata. In order to prevent lay users from presenting bogus metadata to the server, we need to check that the user running such a find/getMore possesses the same privilege as is required for the other internal replication commands, namely:

 ResourcePattern::forClusterResource(), ActionType::internal