Encryption at rest and queryable restores both add an `extensions=[...]` key/value to the `wiredtiger_open` configuration string. Because that string is treated as a map, one of the extensions gets lost.