We would want to add this logic to the new DDL coordinator with the modifications to support it running on a shard instead of the config server. Otherwise, we want to preserve the existing logic as much as possible. We'll implement all checks in a separate ticket.

We should also add the very basic no_passthrough test to successfully create a database through the new codepath.