ClientEncryption.encrypt should accept key_id as Binary subtype 4 and reject native UUID

ClientEncryption.encrypt should only accept key_id as Binary subtype 4 and reject native UUID. We should also always return Binary subtype 4, never native UUID, from ClientEncryption.create_data_key.