In addition to the restrictions specified in SERVER-40516 (can't encrypt single-valued types), we also need to ban bsonType "object" since we can't guarantee correctness in equality queries. This ticket should change the parser on both mongod as well as mongocryptd.