Right now, encrypted rollback files end in .bson. This is confusing, as a reader would expect this to be a BSON file. MongoDB should append a '.enc' suffix to this file, to make it clear that it needs to be decrypted.