add test case for finding encrypted embedded document