add sysadmin user data vag item
data bags encrypted
read mysql passwords from encrypted data bag