extracting Chef::EncryptedDataBagItem to a wrapper method so it can be overridden