In the createIndexes command, there are a couple checks we do under IS locks before releasing those locks and then later taking IX locks. However if we are in a transaction, then shared locks participate in two-phase locking and those those IS locks won't actually be released before acquiring the IX locks. Thus a lock upgrade will occur.