Note that the default behavior is still to throw an exception; you
need to opt into ignoring unknown fields.

Fixes #2838.