At the very late stage of PM-912 project, we realized that repl code is sending _isSelf/saslStart/saslContinue as OP_QUERY commands (see SERVER-58338) and some drivers are still using saslStart/saslContinue/buildinfo/authenticate OP_QUERY commands as part of connection handshake (see SERVER-59069). Unfortunately, we could not change existing code and decided to allow those OP_QUERY commands.

We should remove _isSelf/saslStart/saslContinue/buildinfo/authenticate OP_QUERY commands from allowlist for the v6.0 release. To remove saslStart/saslContinue/buildinfo/authenticate, we may need to coordinate the efforts with drivers team since some drivers are using them.