if you perform an aggregation pipeline $lookup from a MongoClient with encryption, where both of collections involved are not encrypted you'll get Pipeline over an encrypted collection cannot reference additional collections 

For example, encrypted collection A, non-encrypted collection B and C and you have pipeline from B : [\{$lookup:{from:"C", localField:"Foo", foreignField:"Bar", as:"Baz"}}] you still get the error above.