Address review

Author: aclark4life

doc/changelog.rst

@@ -17,8 +17,9 @@ PyMongo 4.16 brings a number of changes including:
 - Fixed return type annotation for ``find_one_and_*`` methods on :class:`~pymongo.asynchronous.collection.AsyncCollection`
   and :class:`~pymongo.synchronous.collection.Collection` to include ``None``.
 - Added support for NumPy 1D-arrays in :class:`bson.binary.BinaryVector`.
-- Fixed a bug in :class:`~pymongo.encryption.ClientEncryption`: ClientEncryption
-  shouldn't try to load mongo crypt shared library.
+- Prevented :class:`~pymongo.encryption.ClientEncryption` from loading the crypt
+  shared library to fix "MongoCryptError: An existing crypt_shared library is
+  loaded by the application" unless the linked library search path is set.
 
 Changes in Version 4.15.5 (2025/XX/XX)
 --------------------------------------

pymongo/asynchronous/encryption.py

@@ -13,6 +13,7 @@
 # limitations under the License.
 
 """Support for explicit client-side field level encryption."""
+
 from __future__ import annotations
 
 import asyncio
@@ -719,7 +720,10 @@ def __init__(
         self._encryption = AsyncExplicitEncrypter(
             self._io_callbacks,
             _create_mongocrypt_options(
-                kms_providers=kms_providers, schema_map=None, key_expiration_ms=key_expiration_ms, bypass_encryption=True
+                kms_providers=kms_providers,
+                schema_map=None,
+                key_expiration_ms=key_expiration_ms,
+                bypass_encryption=True,  # Don't load crypt_shared
             ),
         )
         # Use the same key vault collection as the callback.

pymongo/synchronous/encryption.py

@@ -13,6 +13,7 @@
 # limitations under the License.
 
 """Support for explicit client-side field level encryption."""
+
 from __future__ import annotations
 
 import contextlib
@@ -715,7 +716,7 @@ def __init__(
                 kms_providers=kms_providers,
                 schema_map=None,
                 key_expiration_ms=key_expiration_ms,
-                bypass_encryption=True,
+                bypass_encryption=True,  # Don't load crypt_shared
             ),
         )
         # Use the same key vault collection as the callback.