https://docs.mongodb.com/manual/security/ is a good start(not being glib).