We shouldn't, the only thing encrypted bags get us is CYA against Opscode, and the cost is we suddenly have to deal with key distro and management.