The EnableChangeStream hook is using `$tenant` to set tenant id on change stream requests. As we decided to not support `$tenant` anymore, this hook should be changed to use unsigned security token.