mongo _id's can be any arbitrary string
bah, forgot to be non-greedy
don't assume pk value is a valid bson objectid