It is illegal to shard a collection on a shard key that contains encrypted fields. So we should make the analyzeShardKey command fail if the collection has queryable encryption enabled and the given shard key contains an encrypted field.