When DDL operations (e.g. dropDatabase) that require the global lock in X mode are blocked by inactive transactions. The DDL operations could block authentication because reading "user" collection needs the global lock in IS mode too. Transactions expire in 60 seconds by default, so authentication will be blocked for 60 seconds at most.

Authentication is the first step to kill the running transactions or dropDatabase, so it might be usability problem.