The guard that checks if a model has an encryption schema only looks to see if the client's schema map covers the model's namespace. It never checks bypass_auto_encryption.

Mongoid fills in the schema map either way, so a client configured with bypass_auto_encryption: true passes the guard, and then the driver quietly skips encryption, so fields marked encrypt: true get written in plaintext.

The client has to deliberately configure this, and the driver treats bypass plus manual encryption as a legitimate setup. Still, it feels a bit wonky; does this scenario deserve a warning? Should we document it, at the very least?