Does not mean they always will. I have my data bags unencrypted because I am not using chef-server and it makes it slightly easier to reason about what I have available.