Potential loss of data in backups + restore

If an operator does:

* create backup
* change password
* restore backup

They may lose access to their DB because the restore of data does restore the old password and if they did not keep it elsewhere (which you don't necessarily want to do), they won't be able to access their DB again easily

The issue names no file or test entry point. Start by locating the MongoDB backup and restore paths, then reproduce the sequence of creating a backup, changing the password, and restoring it; done means the operator can still access the database after restore without retaining the old password.

Written by the indexing model from the issue text.