Tools performing restores will strip UUIDs out of the oplog tokens they are applying to produce a point in time snapshot. Because there is non-user facing behavior around application of oplog tokens containing UUIDs, the server must require users applying them to possess internal privileges.