Knut Anders researched this issue extensively and reported his findings in
DERBY-5203. His conclusions are as follows.
I propose this new wording for all replication attributes (I think it applies to all, but I've only tested startSlave=true and startMaster=true), and for drop=true:
"If authentication is turned on, you must also specify this attribute in conjunction with the user=userName and password=userPassword
attributes. If both authentication and SQL authorization are turned on, the user must be the database owner."
For shutdown=true, we could use the same wording with the extra qualification that it only applies to shutdown of a single database. We would also need to mention that system shutdown requires user=userName/password=userPassword if both authentication and SQL authorization are enabled.