- Make sure necessary collections and changestream permissions are granted during validation. - Check what happens if user use a readConcern that's not 'majority' via URI -- and handle validation accordingly.