In some cases, it may be safe to rename encrypted collections. As a result, we should allow this if the client is properly authenticated. We can potentially do this by tying this functionality to the restore privilege.
- related to
SERVER-67394 Forbid DDL operations directly on bucket namespaces