SERVER-89946 optimized the common auth checks for CRUD operations against a standalone replica set, like checking for the ability to advance the logical clock. In a sharded cluster, there are likely different checks in the CRUD path that could be similarly optimized, e.g. the various checks for the "internal" action type on the cluster resource.