use encrypted data bag secret internally instead of the path