Question regarding minimum access to run keyhole

[ryanvgates]

What is the minimum access required to run keyhole?

I know the log states

a valid user with roles 'clusterMonitor' and 'readAnyDatabase' on all mongo processes are required. however that will not work for my personal use case as there is data that I don't want keyhole having access to read.

Why is it trying to read the first 5 records of every collection?

2025-05-30T20:53:44Z E (Unauthorized) not authorized on my-db to execute command { find: "my-collection", filter: { : null }, hint: { $natural: 1 }, limit: 5, lsid: { id: UUID("25c672e0-75a6-4014-8f73-67fa76f91b08") }, $clusterTime: { clusterTime: Timestamp(1748638416, 1), signature: { hash: BinData(0, 22E0B93B9C84D4FAA5727780605587CE4232EAE6), keyId: 7473644756086554625 } }, $db: "my-db", $readPreference: { mode: "primary" } }