support for encrypted data bag