update README with example for using `encrypted_data_bag_secret_key_path`