The spec requires that we check update/replace documents for valid keys and the code doesn't appear to do so, nor does libmongoc, as it uses the same underlying function.