Structured encryption only operates on inclusive ranges. Exclusive ranges are pre-processed at encryption-time. The intent-to-encrypt placeholder should indicate whether a range endpoint should be included in the range, or not.