I believe pull request #39 will relieve the need for encrypted data bag functionality here.  The implementation of how one loads credentials should not live in the raid provider.