Recently I ran into an issue where I inadvertently connected to mongos instead of mongod and sent a repairDatabase command which instead of being run on the slave server got pushed out to the master servers. It seems it would be a bad idea to allow this to get proxied out to the masters. I think it should either not be allowed at all via mongos or prompt with a warning on certain commands.