src/mongo/db/commands/authentication_commands.h

needlessly exposes the declaration of CmdAuthenticate,
causing a public dependency on commands.h.

It declares a member function _authenticateX509 that might not be defined.
We should limit detail exposure and declare only what we define.

The only thing in this library needed by client code is disableAuthMechanism,
which should just be a free function.