Users shouldn't be calling saslAuthenticate directly, they should use db.auth(). saslAuthenticate is really just a helper method for auth().