using an encrypted data bag if there is one