protected boolean needsUserId() {
    return true;
  }
@return true if this operation needs to be authenticated first

        New implementations of AbstractOp should override this method to return false if the
        implementation should be excluded from client authentication. e.g. PingOp#needsUserId()
        <p>
        Also, such an operation's <code>MessageType</code> must be added in the 'if' condition
        in
        {@link ServerConnection#updateAndGetSecurityPart()}

@see AbstractOp#sendMessage(Connection)
@see ServerConnection#updateAndGetSecurityPart()
geode-core/src/main/java/org/apache/geode/cache/client/internal/AbstractOp.java