Support both encrypted and unencrypted databags.

Also adds support for user-defined keys for finding the credentials, with defaults so there's no change to existing users of the cookbook.