Since it's not valid to resume after an 'invalidate' change stream entry, those entries shouldn't return a ResumeToken at all. Instead their _id should always be an explicit null so it's clear that it's not safe to resume after them.