Please look at the following for initial information:
DOC-3212 Fix 5.0 XDCR Data Security page
DOC-3216 Update XDCR security page to include new default auth