When all cursors are globally managed, the collection name will not be useful. Only the cursor id will be required, both to locate the server-side ClientCursor and to perform authorization checks.