M/R checked permissions on both the input and output collections in a way that differs from the way we check them for agg in general and $out. We should look into the details and make sure our current methodology is correct and that it works across databases.