After futurizing execCommandDatabase (i.e., the introduction of ExecCommandDatabase), the scope of ImpersonationSessionGuard has reduced to _initiateCommand (see here). The scope must be extended to that of the future-chain returned by ExecCommandDatabase::run() (see here), by making the scoped variable a member of ExecCommandDatabase.