The auth checks for index creation happen far down, so that we can know the namespace that the index is being built on. This is a problem, however, because you might be in a lock when doing the auth checks, which could cause deadlock due to automatic privilege acquisition. We need to do the auth check at the beginning of the operation, before any locks are held