Currently, decrypt method allows any subType in input binary. Some drivers validated this on driver side, some did not. We probably need to add this check on libmongocrypt level to ensure it's not missed.