Default to using  if  is not set
Add the ability to use an encrypted data bag
Add the ability to configure the permissions/mode of the generated file