The validation in collection_options_validation.cpp of each encrypted field path in the encryptedFieldConfig rejects commands where a field name is a prefix of another (e.g. "foo" and "foobar"). However, it should be rejecting a field path only if it is a dotted prefix of another (e.g. "foo" and "foo.bar").