BSONColumnBuilder throwing should be handled gracefully. It may throw for valid reasons, for example, if users have performed direct writes to the bucket collection corrupting the BSONColumn binary in a way that is not caught by BSON validation.

If bucket compression is performed as a re-write when the bucket closes we should leave the bucket uncompressed.

If bucket compression is part of inserting data into an existing bucket we should close this bucket and retry the insert into a new bucket (that is guaranteed to not be corrupted). This requires that all type of valid BSON from the user is encodable in BSONColumn.