changed the data bag structure. non-critical info is unencrypted. passwords and ssh keys are encrypted