Add plugin for parent schemas containing embedded docs

`encrypt.encryptedChildren` ensures that children are unencrypted after failed parent validation