Count and Distinct commands currently do not enumerate the tenantId provided via security token, which will cause parsing issues without expectPrefix.  Ideally, we would have the root requests accessible via the OpMsgRequest, but this would require a port of the existing commands which should be handled separately.  In the meantime, we may still be able to access the tenantId on the ValidatedTenancyScope on the opCtx in lieu of a core fix.

Note this also affects the Hello and Profile commands.