Currently, mongodump and the other database tools accept both the authSource connection string component (see docs) and a --db / -d command line argument (see docs). An implicit behavior here is, if authSource is not specified, the --db / -d command line argument is interpreted as the authentication database, rather than the database to back up. It'd be great if we could mention this in the docs.