Adding encrypted data bags support

[maksar]

By using "data_bag_encrypted" : true it is now possible to use encrypted data bags.

[erithmetic]

+1 on this, I've been using this branch for several months because I like to store developer ssh keys in my user data bags.

[johnbellone]

@fnichol What do you think? +1

[phlipper]

👍

[rgarver]

+1

[viyh]

+1

[j-miyake]

+1

[zenizh]

+1

[ranjib]

@maksar thanks for the PR and very sorry for getting back so late.
Can we remove the encrypted data bag secret optional (or just nuke it). If dropped in right place, the default should work as it is. We have to explicitly provide it only if we are using secret dropped in some custom location.

[theckman]

I think there is a lot of value in getting this merged-in to the LWRP. I agree with Ranjib's feedback and would like to see the data_bag_encrption_key attribute removed.

I know this has been outstanding for awhile, so if you aren't able to make these changes please let us know.

[theckman]

We should rely on the key being provided in the client's config and not here. We should remove any references to this attribute:

Chef::EncryptedDataBagItem.lad(bag, name)