Forbids user writes to "system.profile". Notably, this also prevents "system.profile" from being used as a source or target from renameCollection. Creation, drop, and capped conversion of "system.profile" remain allowed.